Data Security
BuiltChat is designed to keep your chats, generated images, uploaded files, and projects private. Other users cannot access this content unless you choose to share it with them or add them to a shared project.
Who can access your content
Your content is available through your account, so keep your account and password secure. When you share a chat, image, file, or project, the people you share it with may be able to view or use that content according to the sharing permissions you selected.
Do not upload or share information unless you are permitted to use it. Review shared content carefully, and remove access when it is no longer needed.
How AI processes your data
To generate a response, BuiltChat sends the information needed for your request to the AI model provider you selected. This may include your prompt, relevant chat history, instructions, and content from files or images used in the request. The provider processes this information to return the model's response to BuiltChat.
Different models may be operated by different providers. Their processing locations, infrastructure, and data-handling practices can differ, so your request may be processed in a country or region other than your own. Do not assume that selecting a model guarantees a particular data residency location.
Provider retention and model training
Data retention and model-training policies are not the same for every model provider. A provider may temporarily retain prompts and responses for abuse monitoring, service operation, or legal compliance even when it does not use that content to train its general-purpose models.
Model compliance indicators
The model selector shows a Compliance section in each model's details to help you compare how the provider handles data sent to that model:
- Zero Data Retention: indicates whether the model is offered through a provider configuration that does not retain prompts and responses after processing, subject to the provider's terms and any legal exceptions.
- No Training: indicates whether prompts and responses are excluded from training the provider's models.
Yes means the protection is available for that model, No means it is not, and Unknown means BuiltChat cannot guarantee the protection because the model may be served through multiple providers with different data-handling policies. These indicators summarize model and provider information; they are not certifications or guarantees. Provider policies and exceptions may change, so review the provider's current terms before sending sensitive or regulated information.
Zero Data Retention applies to the model provider's handling of a request. It does not mean that chats, files, or generated content are not saved to your BuiltChat account. See "How BuiltChat stores your data" below.
For example, the providers currently state that:
OpenAI API: API data is not used to train or improve OpenAI models unless the customer explicitly opts in. By default, abuse-monitoring logs may include prompts and responses and are retained for up to 30 days, unless longer retention is legally required. Some API features store application data for different periods. See OpenAI's data controls.
Anthropic API: Anthropic says inputs and outputs from its commercial API are not used to train its models unless the customer opts in or submits the material as feedback. API inputs and outputs are normally deleted from Anthropic's backend within 30 days, subject to exceptions for agreed terms, policy enforcement, or legal compliance. See Anthropic's retention policy.
Google Gemini API: Google says prompts and responses submitted through paid services are not used to improve its products and are logged for a limited period for safety, security, and required legal or regulatory disclosures. Different terms apply to unpaid services, where submitted content and responses may be used to improve Google's products and machine-learning technologies. See the Gemini API Additional Terms.
These are summaries, not guarantees, and provider terms can change. Other providers available in BuiltChat have their own policies. Check the selected provider's current API or commercial-service terms before sending sensitive, regulated, or confidential information.
How BuiltChat stores your data
BuiltChat stores your conversations, uploaded files, generated files and images, and project content so that it can provide the service and make that content available in your account. This content is retained until you choose to delete it; BuiltChat does not automatically delete it after a fixed retention period.
Deletion from BuiltChat is permanent. Once you delete content, it cannot be recovered. Permanent removal may not be immediate because copies can remain temporarily in backups, logs, caches, or systems used for security and disaster recovery until they are removed through ordinary deletion cycles. See our Privacy Policy for more information about data retention and deletion.
BuiltChat storage is separate from provider retention. A model provider may retain the copy it received according to its own policy. Deleting content from BuiltChat does not necessarily cause a provider's safety or compliance logs to be deleted immediately.
Features that contact additional services, such as web search or other external tools, may send relevant parts of your request to those services. Their own privacy and retention terms may then apply as well.
Using sensitive information
Avoid entering passwords, payment card details, identification numbers, or other secrets in chats, files, images, or support requests. Only provide confidential or personal information when you are authorized to do so and it is needed for your task.
For more information about how data is handled and protected, read the Privacy Policy and Security page.