Short answerYour notice should say what visitors' messages are used for, which providers receive them, what you store and for how long, how to contact you and how to request deletion. Have a professional review it.
Cover these points
- What you collect: chat messages, emails if asked, technical data.
- Who receives it: your AI provider, hosting and analytics tools.
- Why: to answer questions and improve the service.
- Storage and retention: what you keep and for how long. Some hosts do not store transcripts; check yours.
- Sensitive data: tell users not to enter passwords, payment or health details.
- Rights and contact: how to ask for access or deletion.
- Children: whether the bot is meant for minors.
Do your homework first
Read each provider's data terms: privacy checklist, and for sensitive material Azure OpenAI or self-hosting.
See wording examples in disclosure examples. GPT Migrator's own approach is in its privacy policy. This page is not legal advice.
Not sure it is simple enough to do yourself?
Tell us what your GPT does, whether it uses Actions and how many files it has. We will say what will break and what a rebuild involves. The audit is free.
Request a free audit