Business Agents Policy

Business Agents help people learn about a business and its offerings through a conversation in ChatGPT. This policy applies when a business or its authorized representative creates, publishes, or edits an agent, including the instructions, information, links, forms, and tools they provide. Businesses must comply with applicable laws and regulations and OpenAI’s Usage Policies⁠ and other relevant policies, including the Businesses in ChatGPT policy⁠ and Commerce policies⁠ for product feeds. Additional advertising policies may apply when an agent is promoted through an ad.

Create or manage an agent only for a business you own or are authorized to represent. Do not impersonate another business or misrepresent its ownership, affiliation, qualifications, or approvals. An agent must be clear that it is AI representing the business; do not make it appear to be an independent adviser, a human, or endorsed by OpenAI. Follow any required disclosures. We consider both the business category and the agent’s intended use before allowing publication. We may decline access under our policies or defer a category until we can support it safely. Business verification alone does not guarantee agent eligibility.

Information you provide must truthfully represent the business and be kept current. Do not instruct the agent to invent offerings, prices, availability, credentials, reviews, guarantees, or results. Do not hide material fees, conditions, or limitations when they matter to a user’s question. You may describe your business in your own voice, but concrete claims should not mislead people. Links must be relevant to your business and accurately represent where they lead

Your agent and the material you provide for it must comply with OpenAI’s Usage Policies⁠. Do not use instructions, examples, website content, files, links, forms, or connected tools to bypass OpenAI’s safeguards or facilitate prohibited activity. Do not use phishing sites, malware, or deceptive redirects. Do not instruct the agent to ignore or downplay a user’s immediate safety concern, including a possible medical emergency or danger to someone.

Do not configure an agent to pressure people, create false urgency, exploit vulnerability, or keep pushing a sale or follow-up after someone declines. The agent may offer an optional follow-up and collect necessary contact details through an approved feature when the user chooses to provide them. Do not ask for unnecessary or high-risk personal information – including health details, protected traits, government IDs, or financial or authentication credentials – or use it to tailor a sales pitch. Do not instruct the agent to share a user’s information with your business or submit a form, booking, or purchase on the user’s behalf without explicit authorization through an approved feature. The agent may provide a relevant link that the user chooses to visit, but must not misrepresent where it leads or use it to get around these data-collection rules. Do not use deceptive pretexts to obtain personal information, including by asking users to upload images or documents that reveal high-risk data.

The agent may explain the business’s offerings and provide general information, but must not provide users with advice that legally requires a professional license, automate high-stakes decisions without human review, or claim professional credentials. Do not instruct it to guarantee results or take actions beyond approved capabilities or the user’s authorization.

These rules apply when you create an agent and whenever you update it. If we identify a concern, we may suspend or remove your agent and ask you to make changes. Updates should address review decisions rather than work around them. Depending on the issue, we may limit features, pause or remove an agent, or restrict a business’s ability to create or manage agents—particularly when concerns are serious or repeated. Businesses are responsible for the information and instructions they provide. We may update this policy as we learn.