PayPerQ
PPQ.AI Privacy Policy
At PPQ.AI, we prioritize your privacy and the security of your personal information. Our policy is to collect and store only the minimal data necessary to provide our Services.
This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information when you access our website, platform, and associated features, including any software applications (collectively, "Services").
Personal Information We Collect
We collect very limited information when you use our Services, communicate with us, or create an account. Specifically, our databases store the user agent string, input token count, and output token count of users on a per query basis. We do not sell or share your information for advertising purposes and do not use any provided information to infer personal characteristics about you.
Account Information
If you choose to create an account, we only collect your email address. However you are also free to use our service without creating an account. You are able to delete your account at any time and if you choose to do so, all of your conversations, and even your email, will be deleted from our server as well as the server of our third party account provider, supabase.
Payment Information
When you make payments using a credit card, we use Stripe as our payment processor. While PPQ.AI does not store or have access to your credit card details, Stripe collects and stores certain personal information related to transactions. This information is subject to Stripe's privacy policy and retention practices. To request the deletion of your payment data, you must contact Stripe directly through their data deletion request page.
Communication Information
If you contact us, we may collect any details you choose to provide in your messages.
Social Media Information
When you interact with our pages on third-party platforms such as X or Discord, we may collect any information you voluntarily share.
Information Related to Your Use of the Services
We do not store or associate the following information with your account or IP address:
- Prompts: We do not store any prompts that you submit. They are sent to service providers without identifying information, with one narrow exception: requests to OpenAI-developed models carry a pseudonymous abuse-prevention identifier (see "Service Providers" below).
The only stored information is the count of input and output tokens (i.e., words in a prompt), linked to a randomly generated user ID.
Our platform uses your browser's local storage to maintain settings, conversation history, and a cookie to manage your balance if you do not create an account. This information is stored locally and is not stored at PPQ.AI servers.
Secure Enclave Processing of Chat Requests
Since September 2026, every chat request made through the PPQ.AI web app or API is processed inside an AWS Nitro Enclave: an isolated hardware environment that cannot be read into by PPQ.AI's servers, staff or logs, nor by the enclave's cloud host, AWS. The encrypted connection from your device terminates inside the enclave, so the content of your prompts and of the model's responses is decrypted only there. Outside the enclave, PPQ.AI's systems handle ciphertext or metadata only.
The software that runs inside the enclave is open source and reproducibly built, and its published measurement can be checked against the running enclave before any request is sent, using the verification tools we publish at github.com/PayPerQ/ppq-privacy-verifier. Because PPQ.AI never holds the content of chat requests in a readable form, we are unable to disclose that content to any third party or to produce it in response to legal process.
What leaves the enclave
To bill for and operate the Services, the enclave reports the following metadata about each chat request to PPQ.AI's backend: your randomly generated user ID, the model requested and the provider that served it, input and output token counts, timestamps, and whether the request succeeded or failed. Network metadata such as your IP address is visible at our network edge, as with any web request. The pseudonymous abuse-prevention identifier for OpenAI models described under "Service Providers" is also generated inside the enclave. No prompt or response content is included in any of this.
Routing receipts
Each streamed chat response carries a routing receipt signed by the enclave, stating the model you requested, the provider the enclave connected to, and the model identifier it sent. The receipt contains routing facts only and no prompt or response content.
What the enclave does not yet cover
At present the enclave processes chat requests only. Image, video and music generation, text-to-speech, speech-to-text and other non-chat endpoints are still handled by PPQ.AI's backend directly, so the content of those requests passes through our servers in the ordinary way and is governed by the provider policies and privacy tiers described elsewhere in this policy. We intend to move these request types into the enclave and will update this policy as each one is covered.
For models that are not labeled E2EE, the provider that runs the model still receives your prompt in readable form within its own systems, as described under "Service Providers" and "Model Privacy Tiers & Data Retention". The enclave prevents PPQ.AI from reading your content; it does not change what the model provider receives.
How We Use Personal Information
We use the personal information explicitly provided by you for the following purposes:
- To process payments and update account balances.
- To communicate about our Services and events.
- To comply with legal obligations and protect our rights, your rights, and the rights of others.
Disclosure of Personal Information
We may share your personal information with third parties under the following limited circumstances:
Service Providers
When you submit a prompt, it is transmitted to a relevant service provider (e.g., OpenAI, Anthropic, or another AI model provider). While we do not store prompts or conversations, whether a provider processes or stores them depends on the privacy tier of the model you selected (see "Model Privacy Tiers & Data Retention" below). If you include personal information within your prompts, service providers will have access to it. We request maximum privacy and deletion from our providers where possible, but for models that are not Zero Data Retention we cannot guarantee full deletion.
Abuse-prevention identifier (OpenAI models only). OpenAI requires platforms like ours to attach a per-user "safety identifier" to requests so that any policy enforcement can be scoped to the individual account responsible rather than to our entire platform. For requests to OpenAI-developed models only, we therefore include a pseudonymous identifier derived from your internal account ID using a one-way keyed cryptographic hash. This identifier contains no personal information — not your email, IP address, or prompt content — and cannot be reversed by the provider to identify you. It is not attached to OpenAI's open-source models (e.g., gpt-oss), to models from any other provider, or to Private (E2EE) models.
For fiat payment processing, we use Stripe, which collects and processes financial information according to its own privacy policies.
Important Note on Provider Data Policies
We take steps to ensure minimum data retention across all providers, and for models labeled "ZDR" the web app routes requests exclusively through Zero Data Retention endpoints. When using the API, Zero Data Retention is opt-in per request. For other models, providers may have their own retention policies beyond our control. Avoid submitting sensitive or personal information in prompts.
Legal Compliance
We may share limited personal information if required by law or to protect our rights and the safety of our users.
Model Privacy Tiers & Data Retention
AI models differ in how the underlying provider handles prompt data. To make this transparent, each model in our selector displays a privacy label. Regardless of the tier, PPQ.AI itself does not store the content of your prompts, and for chat requests cannot read it (see "Secure Enclave Processing of Chat Requests" above).
- Anon — The model provider may retain prompt data, but requests are sent without account linkage. This unlinks the request from your account; it does not remove personal data you include in the prompt itself. Exception: OpenAI-developed models additionally carry the pseudonymous abuse-prevention identifier described under "Service Providers", which lets the provider group requests from the same account but does not reveal who you are.
- ZDR (Zero Data Retention) — In the web app, these requests are routed only to endpoints that have agreed not to store prompt or completion data. When using the API, Zero Data Retention is opt-in per request (see our API documentation).
- E2EE — The model runs in a Trusted Execution Environment. Your prompt is encrypted and is not accessible to PPQ.AI or the provider in unencrypted form.
Retention behavior therefore depends on the model you choose. We select privacy-preserving routing where available, but we cannot control a provider's internal policies beyond the guarantees described above.
Your Rights
Depending on your location, you may have statutory rights regarding your personal data. These may include the right to:
- Access information we hold about you.
- Request deletion of your personal data.
- Correct or update your information.
- Transfer your personal data to another entity (data portability).
- Restrict how your data is processed.
- Withdraw consent where applicable.
- Object to data processing.
- File a complaint with your local data protection authority.
Children's Privacy
If you are under 18, you must have parental or guardian consent to use our Services.
Security and Data Retention
We implement commercially reasonable measures to protect personal information. However, no method of data transmission over the Internet is fully secure. We retain personal data only for as long as necessary to provide our Services or comply with legal obligations.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes take effect upon posting on this page, and we will notify you of significant updates.
How to Contact Us
For any questions or concerns regarding this Privacy Policy, please contact us at matt@ppq.ai.