Advertising within a conversation raises an immediate question: Can the advertiser see what a person writes to ChatGPT? According to OpenAI’s official information, no.
OpenAI declares not to share with advertisers conversations, chat history, memory or personal data of users and not to sell data to advertisers. Advertising reports provide aggregated and non-identifying information, such as views and clicks. If a user voluntarily sends a message to an advertiser through an ad function, the advertiser only sees that direct message.
This clarifies the relationship within ChatGPT, but does not exhaust the privacy of a campaign. When the person opens the company’s website, they come into play page, cookies or similar technologies, OpenAI Pixel, Conversions API, form, CRM and advertiser providers.
What the advertiser sees in ChatGPT Ads
According to current official FAQ, the advertiser does not receive:
- user chat text;
- conversation history;
- memory of ChatGPT;
- personal data of the account;
- content not sent directly to the company.
It receives aggregated and non-identifying metrics on the performance of the ads. Functions can evolve, so this description should be checked in official sources before setting policy or communications.
It is incorrect to promise customers “we know what you asked ChatGPT”. In addition to being a alarmist communication, it does not correspond to what OpenAI claims to provide advertisers.
How advertising is chosen
OpenAI explains that the relevance can consider the context and intent of the current conversation, the ad page, title, text, contextual indications and settings available.
This use of the context is not equivalent to delivering the conversation to the advertised company. These are two different steps:
- the platform evaluates if an ad is relevant;
- the advertiser receives performance data, not user chat.
Ads are labeled and separated by the response generated by ChatGPT.
Personalisation and the European Economic Area
OpenAI’s custom-audience documentation states that this feature is not supported for campaigns targeting the European Economic Area or Switzerland, where personalised ads are not currently available.
For Italian campaigns, do not build a plan around retargeting or customer-list features that are unavailable in the region. Base it on actual account options, geography, relevance, the ad and destination page.
Availability can change. Before each launch, it checks documentation, interface and conditions applicable to the actual date.
What changes when the user arrives on the site
The click brings the person out of the ChatGPT environment and into the digital perimeter of the advertiser. Operational responsibility doesn’t disappear here.
The page can use:
- OpenAI Measurement Pixel;
- API conversions;
- analytics tools;
- management of consent;
- contact forms;
- chat or booking systems;
- CRM;
- ecommerce platforms;
- external servers and suppliers.
Each of these elements must be noted. Purposes, data, duration, recipients, transfers and measures cannot be deducted from a generic formula.
OpenAI Pixel and Conversions API
Measurement Pixel sends events from the browser. The API Conversions sends events from the server and OpenAI describes it as a more reliable source of Pixel only when you can use it.
Events can cover actions such as:
- display of a content;
- added to cart;
- start of checkout;
- created order;
- lead created;
- booked appointment.
Before implementing, the company must define:
- what events really serve;
- which data contains each event;
- which legal basis applies;
- how preferences management works;
- what to declare in the information;
- who receives or processes the data;
- how long they are kept;
- how to manage requests and rights;
- which technical measures protect keys and data.
Do not send more information about the necessary “because they could serve”. Minimization reduces risk and complexity.
Consent does not resolve with a generic banner
The classification of Pixels and other instruments depends on real behavior, not the name assigned in the banner panel.
A serious control checks:
- if the script starts before or after a choice;
- which network requests are made;
- which identifiers are used;
- which data is sent;
- if the revocation produces a real effect;
- if the choice remains registered;
- if browsers and devices behave consistently;
- if the information corresponds to implementation.
The legal and technical project must be evaluated with competent professionals in the specific case. This article offers an operational checklist and does not replace legal advice.
Forms and lead generation
When the user sends a form, the company directly receives the data entered. The module must explain in an understandable way:
- who processes data;
- for what purpose;
- which fields are necessary;
- how to read the information;
- any separate purposes;
- how to exercise rights.
Marketing and contact request should not be confused automatically. If you ask for a quote, this does not authorize any future promotional communication.
In CRM, you only retain useful information and define accesses, roles and times. UTMs can be useful to attribute the campaign, but they must be treated within the same data inventory.
First-party and public data
In markets where personalised publics are supported, OpenAI requires only customer data or potential customers for which the company has the right to use advertising. The documentation prohibits data from intermediaries and calls for rights, information, consent, permits and legal basis.
For Italy, the EEA limitation is decisive: do not upload lists for a feature that is not supported. First-party data can still support internal analysis, CRM and future assessments when processed appropriately.
A matrix of responsibility
| Ambito | Question to check |
|---|---|
| ChatGPT Experience | What data does OpenAI share with advertisers? |
| Account Ads | Who has access to campaigns and reports? |
| Website | What scripts and suppliers are loaded? |
| Conversions | What events and data arrive via Pixel or server? |
| Form | What information is collected and why? |
| CRM | Who uses data and how long? |
| Report | Is the data aggregated or connected to identifiable people? |
| Suppliers | Roles, agreements and transfers are documented? |
Checklist privacy before launch
- Official sources OpenAI verified at the launch date.
- Actual functions of the Italian account checked.
- No promise of access to conversations.
- Pixels and network requests tested.
- Events reduced to those needed.
- Keys of the API conversions protected on the server.
- Management of preferences consistent with implementation.
- Updated information.
- Forms and purposes separated when necessary.
- CRM with defined accesses and times.
- Suppliers and nod roles.
- Procedure for requests from interested parties.
Errors to avoid
- Say the advertiser reads the chats.
- Confuse contextual relevance and conversation sharing.
- Load public in a market where they are not supported.
- Install the Pixel without checking when it starts.
- Enter a server key in the public code.
- Send unnecessary data to events.
- Use an information that is copied from another site.
- Treat any contact request as marketing consent.
- Leave CRM accesses without review.
- Consider unchangeable functions and policies of a new product.
Transparency as part of conversion
Privacy is not just a final check. A clear page, a proportionate form and an understandable explanation reduce uncertainty and improve the quality of the relationship.
E-ROE connects strategy, destination pages and measurement in its ChatGPT Ads service. For the technical setup, read OpenAI Pixel and ChatGPT Ads conversions; for audience options, see the ChatGPT Ads targeting guide.
Official sources
- ChatGPT Ads Documentation
- Measurement
- API conversions
- Personalized advertising and territorial limitations
- Official ad FAQ in ChatGPT
Frequently asked questions
Can advertisers read ChatGPT conversations?
OpenAI declares that it does not share with advertisers chat, history, memory or personal data of users. Advertisers receive aggregated and non-identifying information about performance, except for messages sent directly by the user to the advertiser.
Does ChatGPT sell user data to advertisers?
OpenAI claims not to sell user data to advertisers. The methods and controls must be verified in the updated official information.
Are personalised ads available in Italy?
OpenAI documentation indicates that personalised publics and personalised ads are not yet supported for campaigns in the European Economic Area and Switzerland.
Does OpenAI Pixel require consent?
The answer depends on the technical configuration, purpose, data sent and applicable legislation. The advertiser must assess classification, legal basis, information and preferences management in his case.
Who is responsible for the data collected on the advertiser’s website?
The site and its suppliers must define roles, purposes and measures for form, analytics, Pixel, CRM and other treatments. The ChatGPT policy does not replace the company’s information and obligations on its website.