No recent chats
"We don't train on your data" and "we don't keep your data" are two very different promises, and almost every AI provider makes the first while quietly doing the opposite of the second. Here is the distinction, and how to check which one you're actually being offered.
Zero data retention means the provider does not persist your prompts or the model's replies after the request is served. Pinkerton AI keeps no server-side conversation logs, no IP logs and no per-user session records: conversation history is written to your browser's local storage and never to a database. This differs from the "we don't train on your data" promise most assistants make — that one still stores the conversation, it only excludes it from the training set.
Last updated
It means the prompt and the reply exist only for the length of the request. Once the response has streamed to your browser, there is no copy on the provider's side — nothing in a database, nothing in an application log, nothing in a backup. It is a stronger claim than "we don't train on your data", which is compatible with storing every conversation indefinitely.
No, and the gap is where most of the risk sits. Training exclusion is about what happens to the text later; retention is about whether the text exists at all. A provider that excludes your chats from training can still store them for 30 days for abuse review, hand them over under a subpoena, or lose them in a breach. Only non-retention removes those three exposures.
Four checks, cheapest first. One: read the retention clause in the privacy policy, not the marketing page — a real zero-retention policy states a period of zero, not "as long as necessary". Two: see whether history survives a browser data wipe; if it does, it's server-side. Three: check whether an account is required at all, since retention needs an identity to attach records to. Four: look for a stated legal jurisdiction and a data-request process. A provider with nothing stored has nothing to hand over.
Abuse investigation, safety review, debugging, and product analytics — plus, in several jurisdictions, a legal obligation to retain certain records once you hold an identified user account. Removing the account removes most of the obligation, which is why non-retention and no-signup tend to appear together rather than separately.
It lives in your browser's local storage, on the device you used. You can read it, export it and delete it, and no one else can reach it — including the provider, including under a court order, because there is no server-side copy to produce. The cost is that clearing your browser data destroys the history permanently and it cannot be recovered.
| Feature | Pinkerton AI | ChatGPT |
|---|---|---|
| Conversation logs | None kept server-side | Stored, tied to your account |
| IP address logging | Not logged | Logged for abuse and analytics |
| Used for training | No | Opt-out available, on by default in places |
| Retention period | Nothing to retain | 30 days minimum, longer on appeal |
| History location | Your browser only | Provider's servers |
| Human review | No stored text to review | Sampled for safety review |
Pinkerton AI keeps no server-side conversation logs or IP logs. Enterprise tiers of OpenAI and Anthropic offer contractual zero-retention options for API traffic, but their consumer chat products retain conversations by default.
They are separate properties. Pinkerton AI does both: traffic is encrypted in transit and nothing is written server-side afterwards. Encryption alone protects data in motion; non-retention removes the stored copy that encryption at rest would otherwise be protecting.
It can receive the request, but it has nothing to produce. That is the practical difference between a retention policy and an encryption policy — you cannot hand over records that were never written.
No. With nothing retained there is no corpus to train on, and conversations are never forwarded to a training pipeline.
Clear the site data in your browser, or use the in-app clear action. Since the only copy is local, that deletion is final — there is no server-side copy to also request removal of.
No signup. No email. Just open the chat.