No recent chats
"Private" gets used for four different things in AI marketing: encrypted, not-trained-on, not-retained, and not-identified. Only the last two meaningfully limit who can read your conversation. Here is what each one actually covers.
Mostly not. On mainstream assistants your conversations are stored on the provider's servers, tied to a verified account, retained for a defined period, sampled for human safety review, and reachable by a valid legal request. They are encrypted in transit and at rest, which protects them from outside attackers but not from the provider itself. Genuine privacy requires a provider that does not retain the conversation and does not require an identity to attach it to.
Last updated
On the major assistants, no — not in the sense most people mean. The conversation is encrypted in transit, then written to the provider's storage against your account. Staff can access it under internal policy, a sample is reviewed for safety, it is retained for a stated period, and it is disclosable under valid legal process. Encryption protects it from third parties; it does not protect it from the party holding the keys.
Under defined conditions, yes. Every major provider documents some form of authorised human access for abuse investigation and safety evaluation, usually on sampled or flagged conversations rather than routinely. The control is policy, audit and access logging — not a technical impossibility.
Yes, where the provider holds them. Stored conversations tied to an identified account are ordinary business records and are produced under valid legal process like any other. This is the strongest practical argument for non-retention over encryption: an encrypted-at-rest record the provider can decrypt is still a record it can be compelled to produce.
Only partially. Temporary or incognito modes typically exclude the conversation from your visible history and from training, but the provider still receives it, still processes it on its servers, and usually still retains it for a shorter abuse-review window — commonly 30 days. It reduces your own visible footprint more than it reduces the provider's.
Three options, in ascending order of privacy and effort. Run an open-weights model locally, where nothing leaves your machine but you pay for the hardware and lose access to frontier models. Use a hosted provider that keeps no logs and requires no account, so there is no record and no identity to attach one to — this is what Pinkerton AI does. Or use an enterprise contract with a zero-retention clause, which works but requires a company and a signature.
| Feature | Pinkerton AI | ChatGPT |
|---|---|---|
| Encrypted in transit | Yes | Yes |
| Stored on provider servers | No | Yes |
| Linked to your identity | No account exists | Verified account |
| Human safety review | No stored text to sample | Sampled |
| Reachable by subpoena | Nothing to produce | Yes |
| Exposed in a provider breach | No conversation store to breach | Yes |
Yes. Conversations are stored against your account and retained under OpenAI's stated policy. Temporary chat shortens the window but does not eliminate server-side processing or retention.
Gemini conversations are stored in your Google account under Gemini Apps Activity, which is on by default, and a subset is reviewed by human raters. You can turn the activity setting off and delete history, though a shorter-retention copy is still kept for safety.
Yes — either by running an open-weights model locally on your own hardware, or by using a hosted provider that keeps no server-side conversation logs and requires no account, such as Pinkerton AI.
No. There is no legal privilege attached to a conversation with an AI assistant. Unlike a lawyer or a doctor, an AI provider has no professional duty of confidentiality that would resist a valid legal request.
No. Encryption protects the conversation from outsiders. It does nothing about the provider itself, which holds the keys, stores the record and can be compelled to produce it. Non-retention is what removes that exposure.
No signup. No email. Just open the chat.