Privacy

Summary

Provn is a metered API for AI inference and JavaScript execution. The gateway doesn't write your prompts, completions or submitted code to storage or logs. It keeps the metadata it needs to meter, cap and sign each call.

Provn does not sell your data and does not use your requests to train models.

Your identity

Your account is your wallet address. You sign in with an EVM wallet through Privy and a SIWE signature on Robinhood Chain (chain id 4663). Provn asks for no name, email or password.

What Provn stores

For each metered call: model, units (tokens or CPU time), cost, timestamps, key id, a content fingerprint and status. The fingerprint is the first 16 hex characters of a SHA-256 hash over the request.

For your account: wallet address, the SHA-256 hash of each API key (Provn shows the secret once and keeps only the hash), the balance ledger, deposit transaction hashes, your plan, and a passport if you mint one.

What Provn does not store

Prompt and message text, model completions, and code you submit to sandboxes or Terminal. The gateway holds these in memory while it serves the call and writes none of them to storage or logs.

Retention

Provn trims usage history by plan: 7 days on Free, 90 days on Pro and 365 days on Scale.

A receipt you saved still verifies after that, because the check needs only the receipt, its signature and the signer address.

Who else processes your data

Privy processes your wallet connection when you sign in, under its own privacy policy.

The upstream model host receives your prompt in plaintext to run the model. Provn offers the standard privacy tier only and has no confidential tier. The built-in models use a free public upstream, and that host's own terms govern what it does with the prompts it processes.

Receipts and sharing

Your receipts stay private until you share one from the dashboard, and you can turn sharing off again. Terminal receipts are public from the start. A shared receipt shows metadata and a fingerprint, with no content.

On-chain data

Deposits you send and the Merkle roots Provn anchors sit on Robinhood Chain, a public blockchain. Anyone can read them, and neither you nor Provn can delete them. An anchor root is a hash and reveals nothing about the receipts in its batch.

Your controls

Revoke any key from the dashboard. Revoking a key also revokes its sub-keys.

Export your usage history as CSV, share or unshare receipts, and decide whether to mint a passport.

Contact

Send privacy questions by DM to x.com/provn.