Skip to main content
Guide

ChatGPT Ads for Health Brands: Tracking and Policy

How ChatGPT Ads conversion tracking works (pixel, Conversions API, oppref), which health advertisers OpenAI allows, and how to track without PHI.

5 min read

Health brands can measure ChatGPT Ads conversions with OpenAI's Measurement Pixel or with its server-to-server Conversions API, and OpenAI calls the Conversions API "a more reliable tracking source than the pixel alone." For a clinic or telehealth brand, the server route also keeps OpenAI's script off the pages where patients type health information. Curve Compliance supports ChatGPT Ads as a server-side destination under a BAA on every plan. Whether you can advertise at all is up to OpenAI, whose ad policy allows some US health categories case by case.

Book a call. Curve Compliance sets up server-side conversion tracking for ChatGPT Ads alongside Meta, Google, TikTok, Microsoft, Reddit and Amazon. Curve's team does the setup in about a week, and a BAA comes with every plan. Book a call with Curve.

Where ChatGPT Ads stands in 2026

OpenAI began testing ads in the US on February 9, 2026. Ads can appear below a ChatGPT response for users on the Free and Go plans, labeled as sponsored. Plus, Pro, Business, Enterprise and Edu accounts do not see ads, and neither do accounts identified as belonging to people under 18. OpenAI says advertisers receive aggregated reporting such as views and clicks, and "never receive your chats, chat history, memories, name, email, precise location, IP address, or sensitive information (such as health, mental health, political topics)."

Which health advertisers OpenAI allows

OpenAI's ad policies (updated September 10, 2026) treat health services as restricted. Ads for health services outside the US are generally prohibited. In the US, OpenAI "may allow ads from approved advertisers on a case-by-case basis" for:

  • consumer medical devices, wearables and apps;
  • dental services;
  • dietary supplements;
  • disease awareness campaigns that do not advocate for public policy;
  • health insurance;
  • hospitals and urgent care;
  • medical testing and diagnostic products and services;
  • minimally invasive cosmetic procedures;
  • vision products and services.

The policy does not allow unsafe or unapproved medical products, unsupported treatment claims, experimental or investigational therapies, invasive or high-risk procedures, adult-oriented sexual health services, or products that exploit body-image concerns. Advertisers may be asked for proof of licensure, and the rules cover landing pages as well as creative. Prescription drugs and telehealth prescribing are not on the list, so confirm eligibility with OpenAI before you build a campaign.

Placement has its own rules. OpenAI does not place ads on "mental and personal health conversations," and its help centre says ads are not eligible near personal health or mental health topics. Since April 2026, medical advice contexts are no longer blocked by default, but sensitive conversations still are.

How ChatGPT Ads conversion tracking works

The Measurement Pixel is a browser script. You initialize it with a Pixel ID and call oaiq("measure", ...) when a conversion happens. OpenAI's documentation says the pixel:

  • captures oppref, OpenAI's attribution identifier, from the landing page URL and stores it in a first-party __oppref cookie for 30 days;
  • adds the page origin to each event;
  • with automatic advanced matching turned on, "detects supported customer information from your website," hashes it with SHA-256 and sends the hashes with conversion events;
  • starts with consent set to true unless you set it to false or it finds a stored denial.

The Conversions API takes events from your server, using a Pixel ID and a Conversions API key created in Ads Manager. Events must be no older than 7 days, and a batch can hold up to 1,000. The oppref field is optional, but OpenAI notes that "unlike the pixel, the API does not capture oppref for you," so your setup has to capture it on landing and carry it to the conversion.

OpenAI's standard events include appointment_scheduled, lead_created, registration_completed and order_created. Custom events are allowed but cannot be optimization goals. Conversion-optimized campaigns need exactly one active standard conversion event, and you still pay per valid click. Click-through conversions use your configured click window. View-through conversions use a fixed one-day window and are reported separately, and a click takes precedence when both apply.

Why the pixel is the wrong tool on a health site

OpenAI's promises about chats cover what happens inside ChatGPT, not what your website sends. A browser script on a booking or intake page can see what visitors type, and automatic advanced matching is designed to find customer information on the page. Custom event names can also carry a condition or treatment into OpenAI's systems. The HHS tracking bulletin warns that trackers on scheduling and symptom-checker pages "may have access to PHI," and that part of the guidance still applies.

A server-side setup for ChatGPT Ads

  1. In Ads Manager, open Conversions, create a data source (your Pixel ID) and a Conversions API key, and create a conversion event for the outcome you want, such as appointment_scheduled or lead_created.
  2. Curve captures the oppref value when a visitor lands from a ChatGPT ad and keeps attribution through your booking tool.
  3. When the booking or lead happens, Curve sends a standard, neutral event to the Conversions API from its servers, carrying OpenAI's click identifier. Nothing about the visitor's condition goes with it.
  4. Curve's team maps each Curve event to the matching conversion event in Ads Manager, so conversions count toward reporting and optimization.
  5. Curve's consent management keeps sends in line with each visitor's choices.

More on the launch in Curve now supports ChatGPT, Reddit, Amazon Ads and Nextdoor. For unpaid traffic from ChatGPT, see tracking ChatGPT and Perplexity referrals without GA4, and for the broader question of patient data in ChatGPT, is ChatGPT HIPAA compliant?

Book a call. Bring your ChatGPT Ads account and your booking flow, and Curve's team will map the conversion events with you. Book a call with Curve.

Frequently Asked Questions

Can healthcare companies advertise on ChatGPT?

Some can. OpenAI's ad policy treats health services as restricted and may approve US advertisers case by case in listed categories, including dental services, hospitals and urgent care, medical testing, vision and minimally invasive cosmetic procedures. Ads for health services outside the US are generally prohibited.

Does OpenAI share ChatGPT conversations with advertisers?

No. OpenAI says advertisers do not receive chats, chat history, memories, names, emails, precise location, IP addresses or sensitive information such as health topics, and that reporting is aggregated.

Does ChatGPT Ads have a conversions API?

Yes. OpenAI's Conversions API accepts server-to-server events with a Pixel ID and a Conversions API key, and OpenAI describes it as more reliable than the pixel alone.

What is oppref?

It is OpenAI's attribution identifier. The pixel captures it from the landing page URL and stores it for 30 days. The Conversions API does not capture it, so a server-side setup has to collect it on landing and send it with the conversion.

Can I optimize ChatGPT Ads for booked appointments?

Conversion-optimized campaigns use one active standard conversion event, and appointment_scheduled is a standard event. Custom events cannot be optimization goals, and you still pay per valid click.

Does Curve Compliance support ChatGPT Ads?

Yes. Curve sends ChatGPT Ads conversions server-side in place of the pixel, with neutral event names and attribution kept through booking tools, under a BAA on every plan.

Next step

Check your own site

See if your website is at risk. Enter your domain to scan it for tracking scripts that can expose patient data.

Or book a tracking audit

Stay Compliant. Scale Confidently.

Join healthcare innovators who trust Curve for HIPAA-compliant ad tracking.Launch in hours, not months. Your growth stack, now HIPAA-safe.

Book a free tracking audit