Who can see your chats
What is private to you, what your administrators can and cannot see, and how long anything is kept
The short answer: your conversations are yours. Nobody else in your organization sees them unless you share them, and administrators have no button that reveals them.
Your conversations
A chat belongs to the account that created it. It does not appear in anyone else's history, search results or exports.
Sharing is the only way a chat leaves your account, and it is always something you do deliberately. A shared chat becomes a read-only link, either for anyone with the link or only for the colleagues you pick in your organization, and you can revoke it at any time. See Shared chats.
What administrators can and cannot see
Your organization's administrators manage settings, not content.
| They can | They cannot |
|---|---|
| Set which AI models are available | Read your conversations |
| Set a maximum retention period for the organization | Search your chats |
| See usage figures: message counts, cost, which models were used | See what you asked or what the AI answered |
| See who did what in the audit log | See conversation content in the audit log |
Two related settings do exist, and both are narrower than they sound. An organization can switch on visibility of unshared GPTs and unshared document folders for its administrators. Neither covers conversations: there is no equivalent setting for chats, and no administrator role grants one.
If your organization runs the meeting assistant or dictation, those transcripts follow their own retention settings, which an administrator does control. Chats are separate.
How long anything is kept
Retention is measured in days and set in two places: by you, for your own account, and by your organization, as a cap.
The stricter of the two always wins. If your organization caps retention at 32 days you cannot choose to keep chats for a year; if you choose 7 days, your chats go after 7 even though the organization would have allowed 32.
Available periods are 1, 7, 32, 95 and 365 days, or Never (keep until you delete them). An organization that has never set a cap is on Never, so the only limit is your own choice.
Set yours under Data storage → General.
What deletion actually does
When the retention period elapses, the conversation is removed from the database. It is not hidden or archived, and it is not recoverable by you or by support afterwards. The same applies when you delete a chat by hand or wipe your whole history.
Deleting an account works in two steps. The account is deactivated immediately: you can no longer sign in, and you disappear from your organization. It is then retained for 30 days before it is permanently deleted. GPTs, projects and whole organizations follow the same pattern.
The 30 days exist so a deletion made in error can still be undone. After that the data is gone for good.
Deletion is not the same as recall. If you shared a chat as a link and someone copied the text out of it before you revoked the link, that copy is theirs and beyond our reach. Treat a shared link like any other document you have sent.
Getting a copy of your data
There is no export button in the settings. If you want a copy of your data, for example under Art. 15 or Art. 20 GDPR, contact support and the export is produced for you.
Professional secrecy mode
Organizations bound by professional secrecy under § 203 StGB, such as doctors, lawyers, tax advisors or notaries, can switch on a dedicated mode. An admin activates it under Organization settings → Security & compliance → Professional secrecy (§203).
- With the mode on, AI inference only runs at providers that have a § 203 agreement. Models without such a provider are no longer available, so a model that "disappeared" from the picker is usually explained by this.
- The page exists for every organization account, not for personal accounts. Business organizations switch the mode on there themselves; on an enterprise contract the page points you to support.
- You cannot turn the mode off yourself. Deactivation requires written confirmation and goes through support.
Where the data is
All processing and storage happens on European infrastructure. The precise controller, processors and legal basis for your organization are set out in the privacy notice linked at the bottom of every page. If your organization runs DeutschlandGPT under its own branding, that link points at your organization's own notice rather than ours.
For the contractual side, such as the data processing agreement, sub-processors and certifications, talk to your organization's administrator or contact us.