There's also GDPR and similar legislation in the EU. OpenAI is based in the US and if your users are in Europe, you may end up sharing their data to a US entity. So you'd need to consider the legalities of that.

I have a growing list of use cases in the context of a SAAS app where I might want to use openai for various things. But this one could be a deal breaker with some of our customers.