A consultant finishes an engagement and deletes every AI conversation about that client. It feels like closing a file. A week later the DPO asks the harder question: what exactly went, and where was it?
#Does AI save your chat history, and is it gone when you delete it?
Does AI save chat history? Yes. ChatGPT, Gemini, Claude and Grok save your conversations to your account by default, so you see them again on another device. Gemini does this in Gemini Apps Activity, which is on by default for users aged 18 and over.
Does ChatGPT keep history after deleting? Not in your account. A deleted chat leaves your history at once, and OpenAI schedules it for permanent deletion from its systems within 30 days, unless it must keep it longer for security or legal reasons. You cannot restore it, not even through support. Two things are not deleted with it: saved memories created from the chat and files saved in Library. You remove those separately (OpenAI, chat and file retention).
Should I delete my ChatGPT chat history? Delete what you would not want lying around: a chat with client details, personal data or confidential figures. Deleting shortens how long that text exists. It does not undo what already happened: data already used to train a model stays in that model, and on a work account the organisation's retention policy can keep a copy. To keep future chats out of training, see how to turn off ChatGPT training. And archiving is not deleting: an archived chat stays saved and searchable.
#How long ChatGPT, Gemini, Claude and Grok keep your chats
Personal accounts, checked on 20 October 2026 against each provider's help and privacy pages: OpenAI on deleting chats, temporary chat and memory, the Gemini Apps Privacy Hub, Anthropic on how long it stores data and incognito chats, and the Grok FAQ and privacy policy. Grok used inside X falls under X's privacy policy. Business accounts follow the organisation's settings; more on that below. For what memory holds and how to manage it in each tool, see how AI memory works.
#How to delete all your chats, provider by provider
ChatGPT. Open Settings, choose Data controls and select Delete all chats. That includes chats in projects and cannot be undone. Saved memories are under Settings, Personalization, Memory; delete any files you want gone from Library. Steps: Deleting and archiving chats in ChatGPT.
Gemini. On gemini.google.com, open Activity (or go to myactivity.google.com/product/gemini), click Delete and choose All time. In the same place you can set auto-delete to 3 months, or turn off Keep Activity with Turn off and delete activity. Google treats chats you imported from another AI tool as part of your Gemini Apps Activity, so delete those there too. Steps: Manage & delete your activity in Gemini Apps.
Claude. In the sidebar, open Chats and tasks, hover over a chat, open its three-dot menu and choose Select. Then click Select all and Delete. Memories created from those chats stay: delete them under Settings, Memory, or use Reset memory to delete them all. Steps: Delete or rename a conversation and chat search and memory.
Grok. On grok.com, go to Settings and choose the option to delete all conversations; in the app it is Settings, Data Controls, Delete All Conversations. Shared links are a separate step: remove them at grok.com/share-links. Steps: Grok FAQ.
#Why deleted is not the same as gone: four layers
Clear your browser data and your history does not change, because it is stored on the provider's servers, keyed to your account. Deleting is therefore always a request to the provider, and what happens next depends on four layers.
Layer 1: what you see. The conversation list in the sidebar is a view, not storage. Delete here and the item is out of sight. That is the only thing you know for certain.
Layer 2: the database. Beneath the view sits the actual storage: per conversation, a sequence of messages with timestamps, tied to a user ID, usually alongside any files you attached. Deletion works in two steps. First the row is flagged as deleted and no longer served anywhere. Then a cleanup job removes the data for real. For ChatGPT, Claude and Grok, the gap between the two is up to 30 days. The delay exists so security incidents and abuse reported later can still be investigated. It does mean "deleted" and "gone" become true at different moments, and a data subject request can land somewhere in between.
Layer 3: the technical logs. Alongside the conversation, services log its use: account, timestamp, model, volume of text, error conditions. For API traffic that often includes the request itself. These logs sit apart from your history, carry their own retention period, are not visible in the interface and do not disappear when you delete a conversation. In a record of processing activities this is a separate activity, with its own lawful basis and retention period.
Layer 4: the backups. Every serious service takes backups. Yesterday's backup contains the row you deleted today, and that backup is not searched to honour your deletion. It ages out on its own schedule. OpenAI, for example, says in its notes for Enterprise workspaces that a deleted Library file can stay in its backups for up to 30 more days. Regulators generally accept this, provided the periods are reasonable and restored data is deleted again. It is also why a provider rarely promises "immediately and everywhere".
#At work: who else can reach your chat history
On a business account you are not the only one who decides what stays.
The admin and compliance tools. In a business workspace, the organisation's retention policy decides how long chats are kept. OpenAI states that authorised compliance tools can still reach eligible workspace data after you delete a chat. In ChatGPT Enterprise, temporary chats are available through the Compliance API for 30 days. In Claude Team and Enterprise, incognito chats appear in the organisation's data export for owners. For who can read what, by tool and plan, see our article on whether an admin can read your AI chats.
A GDPR request. On a personal account you ask the provider yourself for a copy or for erasure (Articles 15 and 17 GDPR). If your employer provides the account, the organisation usually handles requests about that data, not the provider. For a privacy officer the question also runs the other way. If a colleague pasted a client's details into a chat, that client's access or erasure request can concern that chat too. Then you need to know which tool it was, which account and who can delete it.
A legal hold. A retention period is a provider's policy operating inside a legal system. In 2025, in The New York Times lawsuit, OpenAI had to keep data from ChatGPT Free, Plus, Pro and Team and from the API, including deleted chats and temporary chats. That obligation ended on 26 September 2025, and OpenAI went back to deleting within 30 days. It still stores a limited set of user data from April to September 2025, locked down and accessible only to a small legal and security team. OpenAI no longer has to keep conversations from the EEA, Switzerland and the UK (OpenAI). ChatGPT Enterprise, Edu and API customers with zero data retention were never covered. The lesson holds for any provider: once a court demands otherwise, the retention period no longer applies.
#What to ask the provider, and what you can do yourself
For a DPIA or a data processing agreement, the four layers translate into four questions:
- What is the interval between deletion and permanent removal?
- Which technical logs exist, what do they contain and how long do they persist?
- Can I configure the retention period, and does it govern the logs as well?
- What is your process on receiving a legal demand or preservation order, and will I be told?
For everyday work the conclusion is simpler. Deleting afterwards is a decent gesture with a delay, four layers and an exception attached. Text that never went in needs no cleanup. BeeSensible highlights sensitive details while you type in AI tools, so you can mask or remove them before you send. For privacy officers who want AI use and personal data in view for the record of processing activities and the DPIA: BeeSensible for privacy officers. For what else stays behind in chat logs, see the hidden risks of AI chat logs.
