Does ChatGPT Save Your Prompts? What OpenAI Actually Retains in 2026

Short answer: Yes, ChatGPT saves your prompts — though which prompts, for how long, and for what purpose depends on the plan you're on, the settings you've toggled, and whether the conversation is a Temporary Chat. Even on the most privacy-friendly configuration (Temporary Chat, history off, training opt-out), OpenAI retains conversations for up to 30 days for abuse monitoring before deletion. On the API with Zero Data Retention, retention can be effectively zero. This guide walks through exactly what OpenAI keeps, on which plan, for how long, and what you can do about it.

The two questions hiding inside "save"

When people ask "does ChatGPT save my prompts?" they usually mean one of two things:

1. Does the conversation appear in my history later? This is a UI question. It's controlled by your Chat history setting and the new "Temporary Chat" feature.
2. Does OpenAI store the prompt on its servers, and for how long? This is the privacy question that actually matters. It's controlled by your plan, your Data Controls, and OpenAI's standard abuse-monitoring policy.

The two settings are related but not identical. You can have a chat that doesn't appear in your history but is still retained on OpenAI's servers for up to 30 days. You can have a chat that is in your history but is excluded from training. They are separate switches.

What OpenAI actually retains, by plan (April 2026)

| Plan | Conversation history | Training on your prompts | Standard server-side retention | Zero retention available? | | --- | --- | --- | --- | --- | | ChatGPT Free | Visible to you, retained per Data Controls | Yes, unless you opt out | Up to 30 days for abuse monitoring after deletion | No | | ChatGPT Plus | Visible to you, retained per Data Controls | Yes, unless you opt out | Up to 30 days for abuse monitoring after deletion | No | | ChatGPT Pro | Visible to you, retained per Data Controls | No (Pro is excluded by default) | Up to 30 days for abuse monitoring after deletion | No | | ChatGPT Team | Visible to user; admins have workspace access | No | Configurable by admin; default 30 days | Limited | | ChatGPT Enterprise / Edu | Visible to user; admins have workspace access | No | Configurable; ZDR available for HIPAA / regulated workloads | Yes (request) | | OpenAI API (default) | API customer controls retention on their side | No (API excluded from training by default) | 30 days for abuse monitoring | Yes (request) | | OpenAI API + Zero Data Retention | n/a | No | Effectively zero (no logging beyond the request itself) | Active | | Temporary Chat (any tier) | Not stored in chat history | No | Up to 30 days for abuse monitoring | n/a |

A few things follow:

• "Off" doesn't mean "never recorded." Turning Chat history off and turning off "Improve the model for everyone" stops your prompts from appearing in your history and from being used for training. It does not stop OpenAI from temporarily storing the prompt for abuse monitoring (currently up to 30 days).
• Temporary Chat is the closest thing to ephemeral, but the ~30-day abuse-monitoring window still applies on free and consumer-paid tiers.
• Zero Data Retention is contractual, not a checkbox. It is available on the API and on ChatGPT Enterprise for eligible customers; you have to request it through your OpenAI account team.

Why OpenAI keeps prompts at all

OpenAI publicly states three reasons for retention:

1. Abuse monitoring. Detecting use of the API for prohibited purposes (CSAM, weapons proliferation, mass-disinformation campaigns, illegal financial conduct, etc.). The 30-day window exists for this purpose even on accounts that have disabled training and history.
2. Trust & safety operations. Investigating incidents, responding to law enforcement requests, complying with legal hold and discovery orders.
3. Product improvement. On consumer Free / Plus accounts, prompts can be sampled (subject to your training opt-in/out and OpenAI's policy) for model and product improvement.

Reason 1 is non-negotiable on most tiers; reasons 2 and 3 are governed by your settings and contract.

What "deleted" actually means

When you click delete in ChatGPT:

• The conversation is removed from your visible history immediately.
• Internally, OpenAI's documented policy is to remove deleted conversations from their systems within 30 days, except where retention is required for abuse monitoring or legal compliance.
• In practice, "deletion" on a SaaS service is typically a marker for purge from primary storage, with backups and logs aging out on their own schedule. OpenAI's approach is consistent with industry norms; if you need cryptographic guarantees of unrecoverability, no major consumer AI service offers them today.

If you have a specific compliance reason to require provable deletion, the right product is the API with Zero Data Retention or a ChatGPT Enterprise tenancy with ZDR enabled — not a consumer plan.

What about the prompts your employer can read?

Even on a personal account, your prompts may be visible to:

• Your employer, if you used a managed device, a corporate VPN, or a company-managed account. (See Can My Employer See My ChatGPT Prompts? for the full breakdown.)
• Other workspace members and admins, on a Team or Enterprise plan, depending on configuration and admin permissions.
• Plugin or connector vendors, if you used a third-party connector — those vendors see the slice of the conversation routed to their tool.
• Anyone with whom you shared a conversation link, including web crawlers if the link was indexable. (OpenAI changed defaults around shared chats in 2025 after Google indexed several. Verify the current sharing model.)

"Saved by OpenAI" is just one of several places your prompts might persist.

Settings you can change today

Five minutes of settings changes, ranked by impact:

1. ChatGPT Data Controls

Settings → Data Controls. Three switches matter:

• Improve the model for everyone — Off opts your prompts out of training. Recommended for any workload involving anything you wouldn't want to read on a job interview transcript.
• Chat history & training (older account variant) — Off disables history and training. The trade-off is that you also lose your past conversations.
• Memory (Personalization → Memory) — Review what ChatGPT has stored about you. Delete anything sensitive. Decide whether to keep memory on. Memory is a separate retention surface from chat history.

2. Temporary Chat

The chat picker has a Temporary Chat toggle. Use it for one-off prompts you don't want to keep in your history. Remember the abuse-monitoring window still applies; Temporary Chat is "do not store in history," not "never transmitted."

3. Sharing

If you've ever clicked "Share" on a conversation, the conversation has a public URL by default. Periodically review and revoke share links you no longer need.

4. Custom GPTs and Connectors

If you've connected ChatGPT to Gmail, Google Drive, GitHub, Notion, or a custom Action, the connector sees the parts of the conversation it's invoked for. Audit your connectors regularly.

5. Plan choice

If you handle confidential or regulated data, the privacy gap between Plus / Pro and Enterprise / API+ZDR is much larger than the price gap. For regulated workflows, the consumer tiers are usually the wrong tool.

When settings aren't enough: keep regulated data out of the prompt

The strongest privacy guarantee is the data you never send. For regulated data — PHI, PII, financial NPI, source code with embedded secrets, attorney work product — the right control is:

• Don't paste it. Use placeholders. AI is usually as good at "rewrite this email for [Patient]" as it is at the original.
• Tokenize at the browser layer. A local-first tool like Sonomos detects sensitive entities — names, account numbers, health terms, secrets — before the prompt leaves your browser, and replaces them with reversible tokens. The model sees a usable prompt; OpenAI never sees the underlying values; the original mapping stays on your device. Because the masking happens locally, no third party — including Sonomos — ever sees the unmasked content.

Whatever OpenAI saves on its servers can only contain what was sent. If the regulated data never went, retention becomes a non-issue for that data.

Frequently asked questions

Does ChatGPT save my prompts if I delete them?

OpenAI removes deleted conversations from systems generally within 30 days, except where retention is required for abuse monitoring or legal compliance. The conversation is removed from your visible history immediately. Backups and logs age out on their own schedule. For provable deletion, use the API with Zero Data Retention or ChatGPT Enterprise with ZDR.

Are Temporary Chats saved?

Temporary Chats are not stored in your chat history and are not used for training. They may still be retained for up to 30 days for abuse monitoring on consumer plans. They are best understood as "do not store in history," not "do not transmit."

Does ChatGPT use my prompts for training?

It depends on the plan. Free, Plus, and Pro may use your prompts for training unless you opt out in Data Controls. Team, Enterprise, Edu, and the API are excluded from training by default. Always verify in Data Controls — the defaults have changed several times.

Can OpenAI see my prompts even if I have history off?

OpenAI's systems handle the prompt to generate the response. With Chat history and training off, the prompt is not stored in your history, not used for training, and is retained only for abuse monitoring (currently up to 30 days). "Not visible to OpenAI staff" is closer to true on Enterprise + ZDR; on consumer plans it is a continuum, not a binary.

Can my prompts be subpoenaed?

Yes. OpenAI complies with valid legal process. Stored prompts — including conversation history, files, and account data — can be produced in response to subpoenas, court orders, and law-enforcement requests. The retention window determines what is producible.

Are my prompts encrypted?

Prompts are encrypted in transit (TLS) and at rest (AES). OpenAI staff with appropriate authorization can access the unencrypted content for the documented purposes. End-to-end encryption (where only you can read the content) is not the model — by definition, the model server has to read your prompt to respond to it.

What about ChatGPT memory?

Memory is a separate retention surface from chat history. Items in Memory persist across chats until you delete them. Treat Memory like a journal — anything you don't want stored should not be stored.

Does this apply to Claude and Gemini too?

The shape is similar — short retention windows on enterprise tiers, longer on consumer, training-on-prompts varies by tier — but the specifics differ. Anthropic excludes Claude from training by default across consumer and enterprise tiers; Google's free Gemini may be reviewed by humans. Read each provider's privacy page; don't assume the policies are the same.

How does Sonomos help?

Sonomos doesn't change what OpenAI stores; it changes what reaches OpenAI in the first place. By detecting sensitive entities in your prompt and tokenizing them in your browser before submission, Sonomos ensures the underlying values never leave your device. Whatever OpenAI's retention policy is, it can't retain what you didn't send.

The bottom line

ChatGPT saves your prompts — but how much, for how long, and to what end depends entirely on the plan and the settings. On the consumer tiers in 2026, assume: visible in your history unless you turn it off, retained for up to 30 days for abuse monitoring even when turned off, and used for training unless you opt out. On Enterprise + ZDR, assume the contractual minimum. For anything you genuinely cannot afford to have stored, don't put it in the prompt — tokenize it on your device first.