GPT API Privacy

Regarding the GPT API:
If you grant it access to sensitive documents or data, is the data kept private or is it made public? Are there any differences between GPT and GPT Pro in terms of their user agreements when it comes to data privacy?

Furthermore, if you intend to use the API for commercial purposes, what safeguards should be put in place to ensure secure usage? Any recommendations or precautions to consider?

I join, I have the same questions

I join, I have the same questions, although I would add the fact that it is used for research purposes and intangible heritage.

These are good questions to ask OpenAI. ChapGPT is their product. DeepLearning.AI is a different company.

The point you made was clear from the begining, hence I publishded under:
“General Discussions: this category to discuss everything related to AI but not related to the courses”
I’m sure that regardless of company afiliations, people can discuss such themes with like minded people. Unless of course it should read as “General Discussions: this category to discuss everything related to ‘deeplearning.ai’ but not related to the courses”

I just want to point out that I visited OpenAI, and their privacy terms talk about the website, but not about the API nor GPTpro. I thought someone in the “deeplearning.ai” comunity would be able to poin me in the right direction or talk about their experinces.

Your question is welcome here of course. But I don’t think you’ll get a definitive answer, as you’re asking about OpenAI’s product.

It’s a valid point also for the course, I think. Especially since co-presented with Isa from OpenAI + tacit endorsement of GPT-3.5-turbo and GPT-4. It could also be considered a platform independent, generic question: “what happens to prompts submitted through API to a public model?” or “what need be considered when using sensitive or confidential documents with API-based LLMs?” or “what are best practices in using API-based LLMs with sensitive/confidential documents (prompts)?” - similar to the best practice of not including your API-key directly in the Python script.

I know the feeling, I was only able to find the “terms and conditions” regading the website submissions… but no about the API

Perhaps new licensing paradigmes must be created, for example: what if “I don’t mind sharing my data provided that it gets anonimized”. I can imagine how some comercial enterprises will be benefit from this

I wonder: are there other scenarios that may require new licence types?