Dropbox's native ChatGPT integration (10 September 2026): a shipped data flow whose training and retention terms are not stated on the four Dropbox pages reviewed

On Thursday 10 September 2026 Dropbox published a blog post titled "Dropbox brings trusted project context directly into the ChatGPT Library," announcing that it was "introducing a new native Dropbox experience in ChatGPT." Dropbox says it had earlier brought Dropbox into ChatGPT "through our Model Context Protocol (MCP)-powered app"; the new piece is that, once connected, Dropbox appears in ChatGPT's own file flows: users can "browse and search Dropbox content and folders in Library, choose from recent files, @mention a file in a conversation, add it directly to a prompt, and preview files, including videos, alongside your ChatGPT conversation." The post states that "At launch, the native Dropbox experience is available on the web for ChatGPT and Work, including Enterprise audiences. Mobile availability is coming soon," and reports that "usage across Dropbox's AI integrations has grown more than 13X over the last four months" (Dropbox's own figure). Dropbox's help article says the feature is "available to customers on all Dropbox plans using ChatGPT."

What the pages do say about control is specific, and it is worth stating plainly: this is a connection the user makes, not a silent or automatic one. The help article walks through the steps (open ChatGPT, click Plugins, select Dropbox, click Install plugin, click Sign in with Dropbox, log in), says "ChatGPT retrieves your data only after you've connected your Dropbox account to ChatGPT, and if you ask ChatGPT to perform any action with your Dropbox data," and says "ChatGPT will request your permission before making any changes to your data, such as adding new files, or creating share links." It gives a disconnect path: log in to dropbox.com, click the avatar, then Settings, then Apps, click the arrow next to ChatGPT, and click Disconnect; it adds that users "can manage your access or disconnect Dropbox from ChatGPT at any time." On permissions, the announcement says "Existing Dropbox permissions continue to apply to this experience, so people can only discover and work with files they already have access to through their connected Dropbox account," and that "The source material remains stored in Dropbox." The help article's security section lists "Team policies and admin controls remain unchanged." The same help article lists what the plugin can do beyond reading: moving, copying, deleting and restoring files and folders, creating and editing shared links, and creating and managing file requests; a Dropbox marketing page answers "Is the Dropbox plugin for ChatGPT read-only?" with "No," and advises starting with "low-risk, read-only work." OpenAI's Sondra Batbold is quoted in the announcement describing the integration as "respecting the permissions and controls people already have in place."

What the pages do not say is the point of this entry. This archive searched all four captured pages as they stood on 4 October 2026: the announcement (blog.dropbox.com), Dropbox's marketing guide "ChatGPT Dropbox Integration: 5 Ways to Use It" (dated Aug 29, 2026 in the capture, so it predates the native-experience announcement), the help.dropbox.com "AI integrations" hub, and the help.dropbox.com article "How to connect Dropbox to ChatGPT." Searches covered the terms train, retain/retention, opt-out, opt-in, improve, consent, encrypt, "30 days," admin, block, restrict, disable and scope. None of the four pages states (a) whether content sent to ChatGPT through the integration is used to train models, (b) how long OpenAI retains that content, or (c) any administrator mechanism to block or scope the connector. The only hits were unrelated or already quoted: "training sessions" in a blurb about Dropbox Learn courses, "retain a trusted home for the underlying work" in the announcement's closing paragraph, the word "scope" in a sample prompt for comparing two proposal documents, and the single "admin controls remain unchanged" bullet quoted above. On the data's destination, the help article's only statement is a pointer: "For data hosted on OpenAI platforms, please see OpenAI's Privacy Policy for more information on how, when, and with who that data may be shared." That is a referral to another company's document, not a statement of terms, and this archive has not reviewed that policy for this entry. The article the help page links for disconnecting third-party apps was not captured, so this entry makes no claim about what it says. These are statements about four captured pages, not about everything Dropbox or OpenAI has published or contracted elsewhere.

The connection to what this archive already holds: in December 2023 the complaint was a "third-party AI" toggle switched on by default for most of the world with little explanation (see the entry on the 2023 OpenAI toggle backlash). That entry records Dropbox then saying that customer data shared with OpenAI was not used to train OpenAI's models and was deleted within 30 days, and the Dash third-party AI connectors entry records further Dropbox assurances about Dash. Those statements were made about Dropbox's own AI features and Dash. The four 2026 pages on the ChatGPT integration do not repeat them and do not say whether they apply here. The 2026 difference is real: this is a shipped product the user opts into by connecting an account, not a default-on setting. But the training and retention questions users asked in 2023 are, on the integration's own pages, still not answered. This entry does not claim that Dropbox or OpenAI trains on content passing through the integration, and it makes no claim about what either company does with the data; it records only that the pages do not say.