>OpenAI will not use data submitted by customers via our API to train or improve our models, unless you explicitly decide to share your data with us for this purpose. You can opt-in to share data.
OpenAI won't. Don't mean nobody else will. Microsoft or another subsidiary Microsoft opens, or sell it so someone else does. There's no statement claiming there is no transfer of that sort. Only restriction of de-identified data to a maximum of also 30 days for contractors and sub-processors.
So OpenAI won't retain the information, nor contractors. Don't see why Microsoft can't, because Microsoft ain't either of those. So I went to see what their privacy policy says on transferin https://openai.com/policies/privacy-policy
>We do not and will not sell your Personal Information.
Don't say "we will not transfer your personal information". Only "we will not sell it". Don't say "we won't sell the de-identified information", only what's the "personal information" which I assume just means yer name and exact location are stripped and whatnot. All of this still, to my eyes, fully allows Microsoft to siphon data from OpenAI including personal information. Because it does NOT say "we will not TRANSFER your personal information".
See also section 3 of the privacy policy "Sharing and disclosure of personal information",
>In certain circumstances we may share your Personal Information with third parties without further notice to you, unless required by the law, including without limitation in the situations below
So the three examples given are just that. Examples. Could be a lot more, could be a lot less.
>Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Information in the course of performing their duties to us.
Seems to me Microsoft could easily squeeze in them elephant sized holes for all/any of the above plus "other information technology service providers". Or in any of the unlisted "certain circumstances" because they're given without limit unless required by law, and US law on that would let the cows in if used for a door. Same goes for OpenAI transferring to be owned by some other company, which the TOS allows your personal information to be transferred to as well.
A relevant lawyer can probably whack some sense into me but far as my ignorant figgering goes all these words don't mean squat and aren't intended to really mean squat by very careful design.