Privacy Policy

This Privacy Policy describes how the operators of PRXVT ("PRXVT", "we", "us") handle information in connection with the PRXVT website, application, and API (together, the "Service"). By using the Service you agree to this Policy and to our Terms of Service. If you do not agree, do not use the Service.

The Service is deliberately architected to minimize the data that exists in the first place. We do not require or collect:

• names, email addresses, phone numbers, or account registrations;
• government identification or other KYC information;
• payment-card or banking details (payment is made in cryptocurrency);
• advertising identifiers, third-party analytics, or tracking cookies;
• a server-side copy of your conversation history.

Because much of this information is never created on our side, we generally cannot produce it, link it to you, or be compelled to disclose it.

We (or our infrastructure providers) may process the following:

• Prompt and request content.The text, files, and parameters you submit are processed to generate a response. For third-party ("contractual") models, this content is forwarded to the applicable model provider (see Section 5). We do not retain prompt or response content beyond what is needed to serve the request, except where you choose to store it on your own device.
• Network information. Our servers necessarily receive the IP address of an incoming connection. We redact IP addresses in our operational logs by default and do not use them to build a profile. If you route your connection through the Nym mixnet or a similar network, we do not receive a usable address at all.
• Operational and security logs. We keep minimal, short-lived technical logs (for example, error events, rate-limit counters, and aggregate metrics) to operate the Service, prevent abuse, and keep it secure. These are not used to identify individuals.
• On-chain payment data. Payments are made in USDC on the Base blockchain. Transactions on a public blockchain are visible to anyone and are permanent. We do not control the blockchain and cannot alter or delete on-chain records. Our confidential-pool design is intended to break the link between an on-chain deposit and a specific request, but the existence of the deposit transaction itself is public.

Your secret keys, balance, and conversation history are stored locally in your browser (encrypted at rest where supported by your device), not in our database. Document uploads used for retrieval are processed on your device. You can delete this local data at any time by clearing it in the app or in your browser. Because we do not hold a copy, you are responsible for backing up anything you wish to keep. If you lose your local data or your recovery key, we cannot recover it for you.

• Model providers. For third-party models, your prompt content is sent to the relevant AI provider (for example, providers of Claude, GPT, Gemini, or open-weight models, including via aggregators) so they can generate a response. Those providers process that content under their own terms and privacy policies. They do not receive your wallet, payment identity, or other account information from us, because we do not have it, but they do receive the words of your prompt. Models we self-host process prompts on our own infrastructure.
• Infrastructure and payment rails. We rely on hosting, storage, blockchain RPC, and payment-facilitation providers to operate the Service. They process technical data on our behalf to deliver the Service.
• Legal disclosure. We may disclose information we actually hold if required by applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of PRXVT, our users, or the public. By design, the information we hold is minimal.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

We do not use tracking or advertising cookies. The Service uses browser local storage and similar mechanisms strictly to make the application function (for example, to hold your keys, settings, and history on your device). These are not used to track you across other websites.

We retain the limited operational data described above only for as long as necessary for the purposes described, after which it is deleted or aggregated. Prompt and response content is not retained by us after a request is served, other than copies you choose to keep on your own device. On-chain data is permanent and outside our control.

We take reasonable technical and organizational measures designed to protect the limited data we process. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your own device, keys, and recovery material.

You can delete your local data at any time, choose privacy-enhancing options such as on-device redaction and mixnet routing, or stop using the Service. Depending on where you live, you may have rights under laws such as the GDPR or CCPA to access, correct, or delete personal data we hold about you. Because we deliberately hold little or no personal data that can identify you, our ability to respond to such requests may be limited or impossible. Where we can, we will act on valid requests sent to the contact below.

The Service may be operated from, and use infrastructure in, various jurisdictions, and data may be processed in countries other than your own. You are responsible for ensuring that your use of the Service is lawful in your location.

The Service is not directed to children and is intended only for users who are at least the age of majority in their jurisdiction. We do not knowingly collect information from children.

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

Questions about this Policy can be sent to privacy@prxvt.ai.