The short answer
- First, are you allowed to share it? Anything under an NDA or a confidentiality clause may be off-limits for every outside tool. Read the confidentiality guide.
- Then, set ChatGPT up before you upload. Turn off model training, consider a Temporary Chat, and strip identifiers from the file.
- Finally, check the answer. A general chatbot can miss or invent clauses. What ChatGPT catches and misses.
Prefer a tool built for the job? Initialed reviews the whole document and shows which side each risk favors:
1. What happens to a contract file after you upload it?
When you attach a PDF or Word file, ChatGPT pulls its text into that conversation, and the chat stays in your history until you delete it. Where ChatGPT’s file Library is available, the file can also be saved there separately, and deleting the chat does not delete the Library copy. The full document is now on the provider’s servers, not just the clause you asked about. Uploading a whole file also tends to share more than you meant to: signature blocks, addresses, account numbers and exhibits all come along with it.
The risk: Uploading the complete signed agreement, exhibits and all, when your question is about one clause. Everything in the file is now stored with the chat, and possibly in your file Library.
Safer approach: Upload a copy with names, addresses, account numbers and signatures removed, or paste only the clause you need explained.
2. Can your contract be used to train the model?
On ChatGPT’s consumer plans (Free, Plus and Pro), your conversations, including uploaded files, can be used to improve OpenAI’s models unless you turn off “Improve the model for everyone” under Settings → Data Controls. OpenAI says business and enterprise workspaces and the API are not used for training by default. The setting applies to new conversations, so turn it off before you upload, not after. Even with it off, OpenAI says rating a response with a thumbs up or down can let it use that whole conversation for training.
The risk: Assuming a paid consumer plan opts you out. Plus and Pro use the same default as the free plan.
Safer approach: Check Data Controls before uploading anything confidential, or use a business workspace whose terms exclude training.
3. How long does ChatGPT keep the file?
Saved chats stay until you delete them. OpenAI says deleted chats, and Temporary Chats (which never appear in your history and aren’t used for training), are removed from its systems within 30 days, unless it must keep them longer for security or legal reasons. In 2025 a court order in a copyright lawsuit required OpenAI to preserve consumer chats, including deleted ones, for several months, and OpenAI says it still holds some April–September 2025 data because of that case. It is a reminder that “deleted” depends on the provider’s legal obligations as well as its policy.
The risk: Treating “delete chat” as instant erasure, or forgetting that Memory can carry details from the contract into later conversations.
Safer approach: Use a Temporary Chat for one-off questions, turn off Memory if you don’t want details remembered, and delete chats you no longer need.
4. Who else could see it?
Anyone with access to your account can read your history, which matters on a shared or work computer. Share links are another route out: on a personal account, anyone who has the link can view the shared conversation, including files uploaded to it, and can forward the link to others. The provider’s own staff may also review conversations for abuse and safety under its policies.
The risk: Sharing a chat link to show a colleague what the AI said about your contract. The link exposes the whole conversation, including the upload.
Safer approach: Send the answer, not the link. Sign out on shared devices and keep contract work in your own account.
5. Is an AI review of your contract reliable?
Privacy is only half the question. A general chatbot answers what you ask, so it can miss the clause you didn’t think to ask about. It can misread a cross-reference or defined term, summarize a long document unevenly, state a rule from the wrong state, or invent a clause or citation that isn’t there, all in the same confident tone. It also doesn’t know which side of the deal you’re on unless you tell it.
The risk: Relying on a chatbot’s summary of a long contract, or on a legal rule it states without a citation you can check.
Safer approach: Use a tool that reviews the whole document against a consistent checklist and tells you which side each risk favors, check any rule it cites, and have a lawyer look at high-stakes agreements.
Upload your contract to a tool built for contracts
Initialed encrypts documents in transit and at rest, limits access to your account, never uses your contracts to train AI models, and never sells your data or your documents. Delete a document whenever you like. Your first credit is free.
Frequently asked
Is it safe to upload a contract to ChatGPT?
It can be, for a contract that is yours to share, once you have turned off model training in Data Controls and removed identifiers you don’t need to share. It is risky for anything you received under an NDA or a confidentiality clause, because uploading it to any outside service may breach that obligation whatever the tool’s settings are. And a safe upload is not the same as a reliable review: check what the AI tells you before you rely on it.
Does deleting the chat delete my contract?
Deleting a chat removes it from your history straight away. OpenAI says it then deletes the chat from its systems within 30 days, unless it has to keep it longer for security or legal reasons. If you want nothing kept in your history in the first place, use a Temporary Chat, and check whether Memory saved any details from the contract.
How does Initialed handle an uploaded contract?
Initialed is built only for contracts. Documents are encrypted in transit and at rest, access is limited to your account, and we don’t sell your data or the contents of your documents. Your contracts, and the reviews we generate from them, are never used to train AI models, ours or our provider’s. To produce a review, the document’s text is sent to Google’s paid Gemini API, whose terms say Google doesn’t use it to improve its products; we don’t claim a zero-retention arrangement. You can delete a document or your whole account at any time, and backups clear within 30 days. Our privacy policy has the details.
What’s the difference between this guide and “Is it safe to paste a contract into ChatGPT?”
That guide covers whether you’re allowed to share a contract at all: confidentiality obligations, NDAs and personal data. This one covers what happens once you upload the file: training settings, how long ChatGPT keeps it, who can see it, and how reliable the review you get back is.
Check your own contract against this list
Upload yours and Initialed flags these clauses in plain English, in about two minutes.
Review a contract: NDAsKeep reading
All guides →An honest look at what a general chatbot catches on a contract — and the specific ways it misses what matters.
Confidentiality, NDAs, personal data, and retention — what to think about before you paste a contract into any AI tool.
Repairs, auto-renewal, uncapped rent, personal guaranties, and early-termination traps — what to watch for before you sign a lease.
The five clauses that decide whether a freelancer gets paid — scope, payment, IP, termination, and liability.
Comp and clawbacks, equity and vesting, IP assignment, non-competes, and arbitration — what to check before you accept a job offer.
Duration, geography, scope, and enforceability — how to read a non-compete before you sign (and why it varies so much by state).
This guide is general information, not legal or security advice, and Initialed AI is not a law firm. It describes OpenAI’s published consumer policies as of the date above; settings, retention periods and defaults change, so check the current terms of any tool you use. For an important or confidential contract, consult a qualified attorney.