Zero retention policy

Under no circumstances will your data be used to train AI models - neither by us nor by our partners.

What does "Zero-Retention" mean?

"Zero-Retention" is our ironclad promise to you: Your content will never be used to train AI models.

This principle is a core component of our privacy philosophy and applies to all your interactions on the InnoGPT platform.

Our zero-retention guarantee in detail:

  1. No training with your inputs: Every question, every command, and every piece of uploaded content you enter into the platform (your "prompts") is used exclusively to process your current request. Afterward, this data is not stored or analyzed for training purposes.

  2. No training with AI responses: The responses and results generated by the AI are also not used for training or improving the models.

  3. Contractually guaranteed: We not only assure you of this, but have also firmly enshrined it in the contracts with our technology partners (the providers of the LLMs). The providers are obligated not to use your data for training their models.

  4. Your data, your control: You retain full sovereignty and sole ownership of your content. What happens in your workspace remains your intellectual property.

Terms of Use of the LLM Providers

Transparency is extremely important to us. Although our zero-retention policy applies to all models we integrate, each provider has its own specific terms of use. Here is an overview of the models and providers we use.

LLM Provider / Hosting Terms of Use

OpenAI Models

OpenAI (direct API)

innoGPT has entered into a contract with OpenAI for the direct use of API services. In accordance with the OpenAI Terms of Service (Data protection principles for business customers) and the OpenAI API Terms of Service (API usage), OpenAI explicitly commits not to use customer data transmitted via the API to train or improve its models. This commitment applies by default. innoGPT has not agreed to any deviating use. To detect and prevent misuse, data may be retained for a maximum period of 30 days and then deleted. For data processing, innoGPT has entered into a Data Processing Addendum (DPA) with OpenAI. Data transfers to the U.S. are safeguarded by the EU Standard Contractual Clauses (SCCs), which form part of this DPA.

Anthropic Models

Google Cloud Platform (Vertex AI)

innoGPT uses Anthropic’s Claude models via Google Cloud Vertex AI as the hosting provider. In accordance with the Service Specific Terms from Google Cloud and the Anthropic Commercial Terms connected via Vertex AI, inputs and outputs are not used for training or improving the models—neither by Google nor by Anthropic. Processing takes place within the EU region (Frankfurt) selected by innoGPT. For data processing, innoGPT has entered into a Data Processing Agreement (Order processing contract) with Google Cloud that includes the EU Standard Contractual Clauses (SCCs). This allows you to benefit from the performance of the Claude models while ensuring full GDPR compliance through Google Cloud’s EU hosting guarantee.

Google Models

Google Cloud Platform

innoGPT has entered into a customer agreement with Google. innoGPT uses Google Cloud Platform services based on the Service Specific Terms. In these terms, Google has committed not to use customer data to train or improve AI/ML models without the customer’s prior consent. Accordingly, Google also states in a guide to Google Cloud’s generative AI products and in a statement on data protection obligations for cloud-based AI products that Google Cloud does not use customer data to train its Foundation Models by default: “Customers can use Google Cloud’s Foundation Models because they can be confident that their prompts, responses, and all training data for adapter models will not be used to train Foundation Models.”" Additionally, innoGPT has entered into a Data Processing Agreement with Google Cloud that governs data processing by Google Cloud. In the Service Terms, Google Cloud also guarantees that if the customer selects a specific region or multi-region as the data location, Google will store the customer data only in that selected region or multi-region.

Mistral Models

Mistral AI

innoGPT uses Mistral AI’s models via a direct API connection. According to Mistral AI’s privacy policy, inputs and outputs processed via the paid API services (“paid version of our APIs”) are not used for training the AI models. Mistral AI stores this data for a period of 30 days for abuse monitoring before it is deleted. As a European company based in France, Mistral AI is directly subject to the strict requirements of the GDPR and processes the data on servers within the European Union. A Data Processing Addendum (DPA) has been concluded with Mistral AI to regulate data processing.

OpenAI Image Models

OpenAI

innoGPT has entered into an agreement with OpenAI for the direct use of API services. In accordance with the privacy principles published by OpenAI for business customers and API usage, OpenAI explicitly commits to not using customer data transmitted via the API to train or improve its models. This commitment applies by default. innoGPT has not consented to any deviating use. To detect and prevent misuse, data may be retained for a maximum period of 30 days and then deleted. For data processing, innoGPT has entered into a Data Processing Addendum (DPA) with OpenAI. Data transfers to the U.S. are safeguarded by the EU Standard Contractual Clauses (SCCs), which form part of this DPA.

Perplexity Models

Perplexity AI

innoGPT has entered into an agreement with Perplexity AI for the direct use of its API services. In accordance with Perplexity’s API Terms of Service, the company explicitly undertakes not to use customer data (“Customer Content”) to “train, retrain, refine, or otherwise improve generative AI models.” A Data Processing Addendum (DPA) has been concluded with Perplexity AI for data processing. Since Perplexity AI is a U.S. company, data transfers are safeguarded by the EU Standard Contractual Clauses (SCCs) included in the DPA, as well as Perplexity AI’s certification under the EU-U.S. Data Privacy Framework, to ensure adequate protection of personal data.

Image Models

Replicate

innoGPT integrates image generation models via the Replicate platform and has entered into an agreement for this purpose. According to Replicate’s privacy policy, it is explicitly guaranteed that the inputs and outputs that users submit to the service (“Service Data”) will not be used to train Replicate’s own models. This also applies to the open-source models hosted on Replicate. It is important to note that predictions generated via the API, including all inputs and outputs, are automatically deleted from the server after one hour. Data processing takes place in the United States. To ensure an adequate level of data protection for data transfers, a Data Processing Addendum (DPA) has been concluded with Replicate, which incorporates the EU Standard Contractual Clauses (SCCs) as its legal basis.