What Actually Happens to Your ChatGPT Conversations

In January 2026, a federal judge ordered OpenAI to hand 20 million ChatGPT conversations to the lawyers suing it.

Not 20 million conversations that mentioned the plaintiffs. Twenty million conversations, period, pulled as a sample from the logs OpenAI keeps in the normal course of running the product. The plaintiffs themselves acknowledged in filings that the overwhelming majority of those logs have nothing to do with their case. The court ordered them produced anyway.

Nobody in that sample was asked. Nobody was notified. If you used ChatGPT during the covered period, you have no way of knowing whether you're in it, and no standing to object if you are. Several users tried to intervene. Courts denied them, because they weren't parties to the lawsuit.

That's the part worth sitting with. Not "is OpenAI evil." Something more useful.

What OpenAI's policy actually says

Give OpenAI credit where it's due: the published policy is clearer than most, and the company fought this order hard and lost.

Here's the documented behavior on consumer plans (Free, Plus, Pro, Team):

Your chats are saved by default. They sit in your account indefinitely until you delete them.

Deleting is not instant. A deleted chat disappears from your sidebar right away, then is scheduled for permanent removal from OpenAI's systems within 30 days. The policy carves out two exceptions: chats already de-identified and disassociated from your account, and chats OpenAI has to keep for security or legal obligations. That second exception is doing a lot of work, as the last two years demonstrated.

Temporary Chat still lives on a server for up to 30 days. It doesn't appear in your history and isn't used for training, but "not in my history" and "not on their servers" are different statements.

Memory is stored separately from your chats. Delete a conversation and the memories extracted from it stay put. You have to clear those on their own.

Training is on by default. You can turn it off in Data Controls, and you should. It only affects future conversations. Anything already absorbed into a training run stays there.

None of this is hidden. It's in the help center. Most people have simply never read it, because who reads the retention policy of a thing that feels like a text message.

What the court did

The timeline is worth laying out, because it shows how fast a privacy posture can be overridden by something outside the company's control.

May 2025. A magistrate judge orders OpenAI to preserve output log data that would otherwise have been deleted, overriding user deletion requests.
June 2025. OpenAI appeals. The district judge affirms the order.
July 2025. Plaintiffs move to compel a sample of 120 million logs. OpenAI counters with 20 million, arguing that's more than enough. Plaintiffs accept.
October 2025. The forward-looking preservation requirement is lifted. OpenAI returns to standard 30-day deletion for new conversations, and confirms that conversations from the EEA, Switzerland and the UK aren't covered. A defined slice of historical 2025 data stays preserved.
November 2025. OpenAI changes tack, offering to run keyword searches and produce only the conversations that touch the plaintiffs' works. The magistrate rejects it.
January 2026. The district judge affirms in full. All 20 million logs, de-identified, under protective order.

The judge's reasoning is worth watching. He distinguished ChatGPT users from the subjects of a wiretap because wiretap subjects were recorded secretly, while ChatGPT users had voluntarily handed their conversations to a company.

Weaker privacy interest, in the court's view, so discovery was allowed to proceed.

In other words: from a legal perspective, you willingly chose to type your information into a database held on someone else's computer. Which means you have no reasonable expectation toward privacy.

The lesson isn't about OpenAI

OpenAI's CISO publicly objected. Its lawyers appealed twice. The company argued, correctly, that producing tens of millions of unrelated private conversations was disproportionate to the case. But it lost every round.

A privacy policy is a promise about what a company intends to do. It is not a constraint on what a court can order that company to do, what a future owner can decide to do, or what an attacker can take. Retained data is a standing liability that outlives every promise attached to it.

Which means the only question that reliably matters is: does this thing exist on a server somewhere?

If yes, it's subpoenable, breachable, and inheritable by whoever buys the company.

If no, the retention policy is academic. It only holds true until a court asks for your data, and then they have to hand it over.

Any AI service that keeps conversation logs can end up here.

What you can actually do

Practical, in rough order of impact:

Turn off training. Settings → Data Controls. Do it now; it isn't retroactive.
Clear your memories separately. Deleting chats doesn't touch them.
Use Temporary Chat for anything sensitive, understanding it's a 30-day server-side window, not zero.
Stop treating a chatbot like a diary or a lawyer. No privilege attaches to what you type into a consumer AI product. Legal and medical questions asked as "hypotheticals" are still discoverable records.
Export your history and read it. Most people are startled by how much is in there.
Evaluate tools by architecture, not branding. Ask where conversations live, how long they persist, and what the provider contractually agrees to with any third-party model it routes to. A vendor that can't answer that plainly is telling you something.

The biggest thing you can do: don't use AI tools that keep your logs.

Which is how Deepshi is different.

Deepshi never keeps your data, so we can't hand it over

We built Deepshi so conversations are stored locally on your device rather than accumulated in our chat history.

We don't train models on user conversations.

When you use a third-party model through Deepshi, we hold zero-data-retention terms with that provider, so your prompts aren't retained on their side either.

In short: since we never keep your data, we can never be compelled to hand it over.

Why Your Logs Can Be Leaked On ChatGPT (And Not on Deepshi)