> Document Version: 1.0 Document Owner: Acme Inc Next Review Date: 2027-03-19

Last updated: 2026-03-19

Project: nextjs-saas-example

Organization: Acme Inc

This notice discloses whether user data processed by AI services in this application is used for AI model training, and provides instructions for opting out where applicable.

Transparency about AI training data usage is required under:

- EU AI Act (Regulation (EU) 2024/1689) — transparency obligations under Article 50
- GDPR (Regulation (EU) 2016/679) — lawful basis and purpose limitation under Articles 5 and 6
- CCPA/CPRA — right to know about the purposes of data collection

## Summary

None of the 1 detected AI service(s) use your data for model training when accessed via their commercial APIs. Acme Inc has verified the data handling policies of each provider.

AI Provider | Uses Data for Training | Opt-Out Available
--- | --- | ---
OpenAI | No | N/A (not used)

## Our Commitment

Acme Inc is committed to protecting your data when it is processed by AI services. We commit to:

1. Not sharing user data for AI training without explicit consent
2. Using commercial API tiers that exclude data from model training where available
3. Reviewing AI provider training policies at least quarterly
4. Notifying users if any provider changes their training data policy
5. Minimizing data sent to AI providers (data minimization principle)

## Per-Provider Training Data Policies

### OpenAI

Service: openai

Uses Data for Training: No

Details: API data is NOT used for model training by default. OpenAI's API Data Usage Policy (effective March 1, 2023) states that data sent via the API will not be used to train or improve models unless you explicitly opt in.

Data Retention: API inputs/outputs retained for 30 days for abuse monitoring only (not training)

Opt-Out Instructions:

- API data is opted out by default. If using ChatGPT (consumer), disable 'Improve the model for everyone' in Settings > Data Controls.
- Full policy: https://openai.com/policies/privacy-policy

## Your Rights

You have the right to:

- Know whether your data is used for AI training
- Object to having your data used for AI training (GDPR Art. 21)
- Withdraw consent for AI data processing at any time (GDPR Art. 7(3))
- Request deletion of data that has been sent to AI providers (GDPR Art. 17)
- Opt out of data sharing for AI training (CCPA/CPRA right to opt out)

To exercise these rights, contact us at legal@acme.com or our DPO at dpo@acme-saas.com.

## Implementation Checklist

- All AI provider training data policies have been reviewed
- Commercial API tiers are used where available to prevent training data usage
- Users are informed about AI data processing before first interaction
- Opt-out mechanisms are implemented and accessible
- Data minimization is applied to AI API calls
- This notice is linked from the application's privacy policy
- Quarterly review of AI provider training policies is scheduled

## Contact

For questions about AI training data practices, contact:

- Email: legal@acme.com
- Data Protection Officer: dpo@acme-saas.com

This AI training data notice was generated by Codepliant based on an automated scan of the nextjs-saas-example codebase. AI provider training policies are subject to change. This document should be reviewed regularly and verified against each provider's current terms of service and privacy policy.