In short
Redaction happens before the prompt leaves
The privacy model runs in your browser. Sensitive spans are replaced before the text is sent to a model provider, so the raw text is not transmitted to be redacted somewhere else.
This site talks to nobody but us
No third-party fonts, scripts or analytics. Every asset is served from our own origin, so visiting this page tells no outside company that you were here.
Your provider keys stay yours
Chat runs on your own provider credentials, stored encrypted and scoped to your workspace. Model usage is billed to your provider account, not routed through a shared key of ours.
Privacy Notice
Version 0.1 (beta) · Effective: July 8, 2026 · Controller: Prompt Purge LLC, which operates the Obskur AI service, 12090 Helga Ln., Moreno Valley, CA 92555, USA. Privacy contact: privacy@obskur.ai.
This notice covers our own processing, as controller, of visitor and account data. Content that business customers process through the Service on their behalf is governed by our agreement with them, including our Data Processing Addendum where one is signed. This notice is a beta version under review by counsel; material changes will be notified as described in section 12.
1. Our privacy-by-design architecture (read this first)
Obskur AI is built to minimise the personal data we handle:
- In-browser redaction. Personal data you type is detected and replaced with placeholders on your device, before anything is transmitted. In normal use, our servers and the AI provider receive only the redacted text. Redaction is best-effort (it can be disabled, bypassed, or miss data), so this is data minimisation, not a guarantee.
- No third-party tracking on our sites. Our web app and marketing site make no third-party runtime calls — no advertising networks, no third-party analytics, no CDN fonts. We do not sell or share personal data for advertising.
- First-party, self-hosted analytics (Umami) — aggregate, cookieless usage statistics on our own servers.
- Our own infrastructure, hosted by Hetzner in Hillsboro, Oregon, USA.
2. What we collect (as controller)
- Account data: name, email, organisation, authentication data (password hashes or single sign-on identifiers), and roles.
- Billing data: plan and transaction metadata. Card details are handled by Stripe — we do not store full card numbers.
- Support, contact and lead data: messages you send us and enquiry details (name, email, message), stored in our self-hosted CRM.
- Usage and security logs: aggregate analytics; security events (for example sign-in and rate limiting) with IP address, for abuse prevention; audit events that record redaction counts and types, never content.
- Customer content (as processor, not controller): conversations and prompts. See section 7.
3. Why, and our legal bases
Where the EU or UK GDPR applies, we rely on these legal bases:
| Purpose | Data | Basis |
|---|---|---|
| Provide the Service, accounts, authentication | Account | Contract |
| Billing, fraud prevention | Billing | Contract / legal obligation |
| Security, abuse prevention, audit | Logs, IP, security events | Legitimate interests |
| Respond to enquiries; marketing to prospects | Contact and lead data | Legitimate interests, or consent where required |
| Product analytics | Aggregate usage | Legitimate interests |
| Comply with the law | As needed | Legal obligation |
4. Cookies
We use only cookies that are strictly necessary (session and security) and a small number of functional preferences, such as remembering that you chose to stay on the marketing site. We use no advertising or third-party tracking cookies.
5. Sharing & service providers
We do not sell personal data. We share it with service providers who process it on our behalf under contract:
- Hetzner — hosting and infrastructure (United States).
- Stripe — payment processing (United States).
- Resend — transactional email delivery, such as sign-up verification (United States).
- Backblaze B2 — off-site backup storage. It holds only encrypted data: backups are encrypted on our own infrastructure before upload, and the decryption key stays in our secrets manager and is never shared with Backblaze, so they cannot read what they store. We list them anyway rather than relying on the encryption to leave them out.
- The AI model providers you enable — they receive the redacted prompt text to generate responses, under their own terms. Which provider receives it depends on your or your organisation's selection: Anthropic, OpenAI, Microsoft Azure OpenAI, OpenRouter, Mistral, Google Gemini, or an OpenAI-compatible endpoint your organisation configures.
- Our CRM (Mautic and SuiteCRM) — self-hosted on our own infrastructure, not a third party.
6. International transfers
Our infrastructure and our service providers are in the United States. If you use the Service from outside the United States, your data is transferred to and processed in the United States.
7. Customer content (our role as processor)
When a business customer uses the Service, prompts and conversations are processed on their behalf: they are the controller and we are the processor. Retention of conversations is customer-configured (default 90 days, with an optional indefinite setting). If an organisation's subscription lapses, indefinitely stored conversations may be deleted 30 days afterwards. Individual members' data is kept while their organisation's subscription is active.
8. How long data is kept
- Account data: while your account exists. When you ask us to close your account, we delete it, except for anything the law requires us to keep (for example, invoices).
- Security logs: only as long as needed for security and abuse prevention.
- Conversation content: as described in section 7.
9. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, or the California Consumer Privacy Act), you may have the right to access, correct, delete, restrict, or port your personal data, to object to its processing, and to withdraw consent. To exercise any of these, contact privacy@obskur.ai. If you are in the EU or UK, you may also complain to your data protection authority. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act.
10. Security
Our technical and organisational measures include: in-browser redaction to minimise the data we transmit; encryption in transit; encryption of stored provider credentials; application-layer isolation between customer workspaces; least-privilege database roles; secrets held in a vault; and access controls with audit logging. No system is perfectly secure.
11. Children
The Service is not directed to anyone under 18, and we do not knowingly collect their data.
12. Changes
We update this notice as needed. We notify material changes by email or in the app, and each version carries its effective date.
Contact: privacy@obskur.ai · Prompt Purge LLC, 12090 Helga Ln., Moreno Valley, CA 92555, USA