Can you use ChatGPT without anyone else seeing your chats?

Who else can read a chat comes down to three things: whether you have shared it, what kind of account you are on, and whether OpenAI or a court has a reason to look. Here is each possible viewer in turn.

You, and anyone signed in as you. ChatGPT cannot tell you apart from someone using your login or your unlocked phone. They see your whole history, including archived chats, which OpenAI says remain searchable.

Anyone with a shared link. Anyone who has a link made from a personal account can open it. OpenAI’s help page says links have no person-by-person access controls and no expiry date, and that anyone who can open a link can forward it. A personal link is a snapshot: messages you add afterwards are not included unless you update it. Links are anonymous by default, though OpenAI says some older sharing experiences may show the creator’s name. Any names, images or files inside the chat are visible.

Search engines. OpenAI says shared link pages are not intended for search-engine indexing. In the same answer it adds that this does not make a link private. Treat any link you have shared as public.

OpenAI. According to OpenAI’s help centre, a limited number of authorised staff, and trusted service providers bound by confidentiality, may access your content only as needed for four reasons: to investigate abuse or a security incident, to support you when you contact them, to handle legal matters, or to improve model performance unless you have opted out. OpenAI says it monitors and logs that access. Its own advice is blunt: do not enter sensitive information you would not want reviewed or used.

Workspace admins. On Business, Enterprise, Edu and Healthcare accounts the picture changes. In a Business workspace each person has their own history, other members do not automatically see it, and usage analytics do not let admins read chats. However, OpenAI’s notice for managed accounts says your administrator may be able to access, export, audit, retain and delete your prompts, uploads, outputs and conversation history, where your organisation’s configuration and the law allow. Business workspace owners can export a member’s data when that option is available, and eligible Enterprise customers can reach temporary chats through the Compliance API for 30 days. Shared links made inside these workspaces open only for members of the same workspace.

Your employer or school. OpenAI’s privacy policy says business account administrators may access your content. It also says that if you sign up with a work email, OpenAI may tell your organisation you have an account. While you are signed in to a managed account, OpenAI’s standard Terms of Use and Privacy Policy do not apply; your organisation’s agreement with OpenAI and its internal policies do. Your personal account stays yours unless an Enterprise or Edu workspace verifies or claims it, and switching between accounts does not move chats from one to the other.

Courts and authorities. The privacy policy says OpenAI may share personal data with government authorities or other third parties to comply with a legal obligation. It may also keep data you have deleted for as long as a legal obligation, such as a lawful subpoena, requires. This has already happened. In a US lawsuit brought by The New York Times, a court order made OpenAI keep consumer ChatGPT content, including deleted chats. OpenAI says that obligation ended on 26 September 2025, and that it no longer has to keep new data or any conversations from the UK, the EEA or Switzerland. It still holds limited user data from April to September 2025 under legal hold, which it says only a small, audited legal and security team can access.

How to do it well

These are the settings worth checking, in order.

1. Clear out shared links. Go to Settings, then Data controls, and select Manage next to Shared links. Delete links one at a time, or use More actions to delete them all. Deleting a link stops future access. It does not delete your original chat, and anyone who continued your shared conversation already has a separate copy in their own account. Changing your training setting does not remove links either.
2. Use Temporary Chat for one-off sensitive questions. Open a new chat, select Temporary, and choose Personalised or Unpersonalised before your first message. A temporary chat stays out of your history, does not create memories and is not used to train models while it stays temporary. OpenAI may keep a copy for up to 30 days for safety purposes. If you use a GPT that sends data to another company through an action, that company’s privacy policy applies and it may keep the data longer.
3. Turn off training. In Settings, then Data controls, switch off Improve the model for everyone. This applies to new conversations. If you give feedback with a thumbs up or down, OpenAI says the whole conversation may still be used for training.
4. Delete rather than archive. Archiving only moves a chat out of the sidebar; it keeps the same retention and stays searchable. Deleting removes it from your view straight away and schedules it for permanent deletion from OpenAI’s systems within 30 days, unless it was already de-identified or OpenAI must keep it for security or legal reasons. Deleted chats cannot be restored, and you have to delete files saved separately in Library on their own.
5. Keep work and personal apart. Check which account you are in before you type. A question about a legal problem or a job you are applying for belongs on your personal account. The same goes for documents you paste in to summarise a PDF or sort out your taxes. OpenAI itself warns against putting health information, financial details, passwords or account numbers into anything you share.
6. Find out what OpenAI holds. Free, Go, Plus and Pro users can export their data from Settings. On a Business, Enterprise or Healthcare workspace, ask the workspace owner instead.

Rules and risks

UK data protection law gives you the right to ask any organisation for copies of the personal information it holds about you. The ICO says anyone can make a subject access request without a solicitor, and organisations usually have one month to respond. OpenAI takes these requests through privacy.openai.com or dsar@openai.com, and its privacy policy names the ICO as the place UK residents can complain.

If your employer runs the account, its own rules matter as much as OpenAI’s. The ICO publishes guidance for employers on monitoring workers under the UK GDPR and the Data Protection Act 2018, setting out what they must, should and could do. Ask for your organisation’s acceptable use and monitoring policies, which OpenAI’s managed account notice says apply to you. The ICO notes that this guidance is under review after the Data (Use and Access) Act.

Some things the sources do not settle:

• How long a court order could keep your chats. The privacy policy says data can be kept for the duration of the legal obligation. It gives no upper limit, and the New York Times case shows that a court order can override deletion.
• Whether a shared link could ever turn up in search. OpenAI says link pages are not intended for indexing, and it does not promise they will never appear. Deleting a link also cannot reach anything a recipient has copied or screenshotted.
• Exactly what your admin can see. OpenAI’s notice says “may” and depends on your organisation’s settings. Only your organisation can tell you what it has switched on.
• Safety checks. OpenAI says turning off memory does not disable safety features that may use limited context from past chats in rare, high-risk situations.

This is general information about how ChatGPT works, not legal advice.