Is ChatGPT Business private? Who can read your work chats

The Morse teamPublished November 6, 202610 min read

ChatGPT Business is private from your coworkers and from OpenAI's model training, but not from your employer, which owns the workspace and, as of November 6, 2026, can export your data from it. OpenAI doesn't use Business chats to train its models by default (OpenAI). Other members of the workspace don't see your chats unless you share one (OpenAI). A workspace owner can export a member's data from the workspace's Members page (OpenAI). Authorized OpenAI employees and outside contractors can read Business chats for a short list of reasons, abuse review among them (OpenAI).

We read OpenAI's enterprise privacy page, its Business Terms, its post on the New York Times case, an OpenAI Academy admin guide, and 13 help center articles on November 6, 2026. ChatGPT Business is the plan OpenAI called ChatGPT Team until August 29, 2025 (OpenAI), so all of this applies to Team workspaces too. OpenAI deserves credit for how much of the worker's side its help center spells out, down to what happens to your chats the day you're removed. Its pages don't all agree on what your admin can see.

What ChatGPT Business keeps, and who controls it

Each row comes from the OpenAI page in its last column, read November 6, 2026.

Can my employer see my ChatGPT Business chats?

Yes, through an export, even though an owner can't browse your chats by default. OpenAI's Business FAQ says that "by default, admins and owners cannot see all private member chats" (OpenAI). OpenAI's Business privacy article tells members who want their workspace data to contact the workspace owner. The owner can open the Members page, choose the menu next to a member, and select Export data, "if available" (OpenAI). OpenAI's enterprise privacy page, updated January 8, 2026, goes further, saying Business workspace admins "can view, access, export, and delete end user conversations in the workspace" (OpenAI).

The notice OpenAI gives everyone with a managed account, Business included, says an administrator "may be able to access, export, audit, retain, delete" data tied to it. OpenAI lists that data as your prompts, uploaded files, and outputs, your conversation history, and usage metadata such as sign-in activity and device details (OpenAI). Under OpenAI's Business Terms, effective January 1, 2026, the organization "retains all ownership rights in Input" and "owns all Output" (section 4.1). The same terms make the organization responsible for getting its employees' consent to what administrators do (section 3.2).

We read the Business FAQ's "cannot see" as covering browsing in the app, not the owner's export. Business has no Compliance API, which OpenAI offers to Enterprise and Edu only (OpenAI), so the owner's export is the route to your chats. The Enterprise, Copilot, Gemini, and Claude admin tools, and what a managed laptop sees whichever account you use, are in can my employer see my ChatGPT. This isn't legal advice: what your employer may do with an export depends on your contract and local law, so ask HR or a lawyer.

Does ChatGPT Business train on your data?

No, not by default, and the choice is your organization's. Section 4.2 of the Business Terms says "OpenAI will not use Customer Content to develop or improve the Services, unless Customer explicitly agrees to such use." On Business, a thumbs up or down "does not permit training on the associated conversation," and admins can switch response feedback off under Workspace settings (OpenAI). That's the reverse of a personal account, where rating a reply can send the whole chat to training, as we explain in does ChatGPT train on your data.

OpenAI's managed account notice also says your administrator may "opt-in to share data tied to this account with OpenAI to improve OpenAI's models" (OpenAI). OpenAI says workspace data, "including conversations and memories, is not used to train OpenAI models" by default (OpenAI), and it doesn't train on data accessed from apps by default (OpenAI).

Who at OpenAI can read ChatGPT Business chats?

Some employees and some contractors. OpenAI's enterprise privacy page limits access to Business conversations to "authorized employees that require access for engineering support, investigating potential platform abuse, and legal compliance" and "specialized third-party contractors who are bound by confidentiality and security obligations, solely to review for abuse and misuse" (OpenAI). OpenAI may also run business data "through automated content classifiers and safety tools," and it says the labels those tools create don't contain the data itself.

Enterprise gets a narrower staff-access promise, which we set beside Business in can my employer see my ChatGPT. Self-serve Business can't get zero data retention. OpenAI's Business overview says anyone who needs "Zero Data Retention, BAAs, or other sales-led options" should "use a contracted offering instead of self-serve ChatGPT Business" (OpenAI). How zero retention works on OpenAI's API is in is the OpenAI API private.

OpenAI encrypts business data at rest with AES-256 and in transit with TLS 1.2 or later (OpenAI). That keeps outsiders out, while OpenAI's own systems and the people above can still read the chats.

How long does ChatGPT Business keep your chats?

Until you delete them, as far as OpenAI's help pages show. OpenAI says deleted or unsaved Business conversations are removed within 30 days, "unless longer retention is required by law, or is reasonably necessary to protect our services or any third party from harm" (OpenAI).

The same page says Business workspace admins "can control how long your data is retained," but its list of commitments names that control for Enterprise, Healthcare, and Edu only. OpenAI Academy's admin guide says chats "are saved indefinitely to the user's account until they delete them," and that "Enterprise Owners" can set a retention policy with a 90-day minimum (OpenAI Academy). As of November 6, 2026, we found no Business retention setting in OpenAI's help center. In June 2025, OpenAI described the old Team plan differently again: "Each of your end users controls whether their conversations are retained" (OpenAI).

Did the New York Times court order cover ChatGPT Business?

Yes, under its old name. When OpenAI answered "Is my data impacted?" in June 2025, it said "Yes, if you have a ChatGPT Free, Plus, Pro, and Team subscription," and that the order did not affect Enterprise or Edu (OpenAI). The duty to keep new chats ended on September 26, 2025. OpenAI's update of October 22, 2025 says it still stores "limited historical April–September 2025 user data," locked and "accessible only to a small, audited OpenAI legal and security team." Team chats deleted during those months may sit in that set. The full timeline is in the ChatGPT court order on data retention.

What happens to your ChatGPT Business chats when you leave?

They stay with the workspace. OpenAI says that after you leave, "you cannot access the workspace's data unless you are invited back," and that leaving "does not move Business content into a personal workspace" (OpenAI).

If you're removed instead, OpenAI's removal page says Business chats, files, and canvas documents are "retained indefinitely," and come back if you're re-added (OpenAI). Your projects and GPTs pass to a workspace owner, but "Conversations and files created by the removed member are not transferred, and are not visible to the workspace owner." Members can't export their data or delete their account in a managed workspace, and OpenAI sends both requests to the workspace owner (OpenAI). A cancelled subscription can deactivate the workspace without deleting its data, while permanently deleting the workspace deletes every member's conversations and memories (OpenAI).

Should you merge your personal ChatGPT into ChatGPT Business?

Only if you're happy for your employer to hold it, because it can't be undone. OpenAI's migration guide says "Migration does not provide an undo option," that migrated content "is subject to your organization's access and retention policies," and that if you lose access to the workspace, "you may also lose access to that content" (OpenAI). You can't choose which chats move, since the flow "does not let you select individual chats, projects, or files." Saved memories, custom GPTs, projects, and Library files move too.

Kept separate, your personal workspace stays under OpenAI's consumer Terms of Use and Privacy Policy, and OpenAI says those two "do not apply" while you're signed in to a managed account (OpenAI). What the personal side keeps is in is ChatGPT private.

Do apps and memory share your Business chats?

They can, inside the workspace's rules. In ChatGPT Business, "many apps are enabled by default," and an enabled app "may access and use relevant context from your ChatGPT conversations," plus your memories if Memory is on (OpenAI). After that, the app handles what it gets under its own terms and privacy policy. Memories are "tied to each individual account" and not transferable to other users, even in the same workspace (OpenAI). If your admins allow it, a GPT you publish outside the workspace "may be subject to additional review" by OpenAI (OpenAI).

How to keep personal questions out of your work ChatGPT

Each answer above comes back to who holds the account. On ChatGPT Business, your organization owns the workspace and everything typed into it, and OpenAI stores the history where an owner can export it and a contractor can review it for abuse. Work belongs there, under your employer's rules. The questions that are nobody's business but yours need an account you hold, with history kept where no admin can export it. Morse keeps your chat history in your browser, encrypted, and our servers don't keep your messages or log what you write.

• Your account is yours. You sign in with a code sent to your email, or with Google, so use a personal address, not your work one.
• No server copy to export. Your history is stored only in your browser, encrypted, and locked when you sign out. Unlocking takes two keys, one that never leaves your device and one our server gives you when you sign in.
• Morse doesn't train on your chats. Morse doesn't train AI on your content, sell your data, or show ads (privacy policy).
• Changing jobs doesn't touch it. Your chats sit in your browser, not in a workspace. Clearing your browser or losing the device deletes them, and Morse can't recover them, so keep a copy of anything you need.

Choose a mode for each chat:

• E2EE, for questions you'd never want in an export or a review queue. Your browser checks a secure enclave's hardware attestation, then encrypts the message so only that enclave can read it. Morse's servers relay ciphertext they can't read, and the reply is decrypted only in your browser. Third-party providers run the enclaves, not Morse, and the guarantee rests on the enclave hardware and attestation working as designed. Here's how end-to-end encrypted AI chat works.
• Private, for everyday personal chats no host should keep. New chats start here, with open-weight models like DeepSeek, Kimi, and GLM, plus Grok. Morse has zero data retention agreements with its inference, search, and other providers, so they keep nothing. Where a provider confirms zero retention on each reply, Morse checks it and refuses a reply that doesn't.
• Anonymous, to keep using GPT without OpenAI knowing it's you. Our proxy removes your account, email, and IP address and sends the message under Morse's own account. OpenAI still sees the words and may keep them for a limited time to check for abuse, under its own policy, so leave your name and your employer's name out.

Use your own device for this. A monitoring tool on a work laptop can see the page before anything is encrypted, which is why our work laptop guide starts with the device.

So is ChatGPT Business private enough?

• From your coworkers: yes. They see only the chats you share, and only inside the workspace.
• From your employer: no. Treat every Business chat as something an owner can export, and keep personal questions on a personal account, on your own device. On Morse, that history stays in your browser.
• From OpenAI's training: yes by default, unless your organization agreed otherwise, so ask IT. Morse doesn't train on your chats.
• From OpenAI's reviewers: no. Abuse review stays, and zero data retention needs a contracted plan. In Morse's E2EE mode, our servers relay ciphertext they can't read.
• When you leave: your work chats stay behind, and only an owner can export them. Merging a personal workspace into Business can't be undone.

Send a first message from the Morse home page on your own device without an account, or start free. End-to-end encrypted chats come with Pro, at $19 a month.