Why privacy matters
The new data brokers are AI companies.
Every job is a disclosure
Translating a video means handing an inference provider the entire transcript. Not a search query, not a summary — the whole thing, before anyone else has seen it.
For most people using this tool that transcript is unreleased work: a course that has not launched, a client interview under embargo, an internal briefing. The provider receives it in plaintext, in full, as an ordinary condition of the request.
Retention is what turns a vendor into a broker
The old data broker bought records from whoever would sell them and resold the aggregate. An AI company skips the buying step: the material arrives directly, and the terms of service decide what happens next.
Read those terms for retention windows, human review, and training corpora. Each one is a copy of your transcript outliving the request that produced it. A provider holding that corpus occupies the data broker's position with better sourcing than a broker ever had.
What a private model actually changes
Three guarantees are worth the label, and this app shows which ones each model carries.
PRIVATE — the provider states the prompt is not retained after the response and is not used for training. It is a policy commitment, and it is the floor.
TEE — inference runs inside a hardware enclave the operator cannot read into, and the enclave signs an attestation you can check. The guarantee stops depending on the policy.
E2EE — the request is encrypted to that enclave, so the plaintext never exists on the provider's disks at all.
Why we recommend rather than restrict
You bring your own key. The account is yours, the bill is yours, and the choice of model is yours — it would be presumptuous of us to spend your key only where we approve.
So models carrying a privacy guarantee are ranked first and marked recommended, and every other model is labelled for exactly what it is. The default is private. The decision is not ours.
The one thing we cannot do is spend our key on a model whose provider can trace the request back to its owner. Those run on your key, so they stay unselectable until you add one — a requirement, not a judgement.