"Promise" is a strong word here.

> According to the complaint, the Privacy Policy lists eleven kinds of outside companies that receive users’ personal data. They include hosting, payments, customer service, analytics and identity verification. None is a data-labeling, annotation or human-evaluation vendor.

Would a "Regular" person interpret the policy such that the described party was one OpenAi "promised" not to share data with?