Privacy contract
Stored fields, excluded content and the other parties that handle your data.
Seal / privacy-contract
Provn doesn't write prompts, completions or submitted code to storage or logs. The gateway holds them in memory while it serves the call and keeps metadata afterwards.
Stored
| Field | Used for |
|---|---|
| Model | Pricing and the receipt |
| Units | Metering |
| Cost | The ledger |
| Timestamps | Usage history and receipts |
| Key id | Caps and attribution |
| Fingerprint | Matching a request you hold without keeping it |
| Status | Error reporting and receipts |
Not stored
- Prompt and message text.
- Model completions.
- Code sent to sandboxes or Terminal.
Retention
Provn trims usage history to your plan's window: 7 days on Free, 90 on Pro and 365 on Scale.
Receipts
Receipts hold metadata and the fingerprint. They stay private unless you share one. Terminal receipts are public from the moment Provn issues them.
Other parties
- The upstream model host processes your prompt in plaintext. Provn offers the standard tier only.
- Privy processes your wallet connection at sign-in.
- Robinhood Chain is public. Your deposit transactions and Provn's anchor roots stay there for anyone to read.
A fingerprint is 16 hex characters of SHA-256. It reveals nothing of your request by itself, but someone holding the exact same request can confirm the match.