Privacy Policy

    Privacy Policy

    This Privacy Policy explains how Vanna Laboratories, Inc. (“Company”, “we”, “us”, “our”) collects, uses, and protects information when you use OpenGradient, including the DreamFort web and mobile apps. For a technical overview of how requests are routed privately, see How it works.

    Last updated: September 21, 2026

    Information we collect and process

    What we keep on our servers, what stays on your device, and what is processed only to fulfill a request.

    Account information. When you sign up, we store your email address, authentication identifiers, and basic profile metadata required to operate your account.

    Billing information. If you purchase credits or a plan, our payment processor handles card data directly. We store the resulting plan, credit balance, and transaction records, but never your full card number.

    Chat history. Your saved conversation history is encrypted and stored locally in your browser or mobile app with a key only your device holds. We do not store a remotely accessible copy of that history. If you clear local app or browser storage, the history may be unrecoverable.

    AI request content. When you choose to send a message or generate media, we process only the content needed to fulfill that request. Depending on the feature, this may include your prompt, relevant conversation context, generation settings, and documents, images, audio, or video you choose to provide. We do not transmit your entire saved conversation database.

    Operational metadata. We log aggregate request volume, error rates, and coarse timing information so we can operate the service. Prompt contents and identifying network details are not part of these logs.

    How we use information

    We use the information above only to run the service you signed up for.

    We use account and billing information to provide access to OpenGradient, bill for usage, send essential service communications, and prevent abuse. We use operational metadata to monitor reliability and improve performance.

    We process AI request content only to provide the result you ask for. We do not sell that content or use it to train models.

    Before the first AI request, the mobile app explains this processing and asks for your explicit permission. If you choose “Not Now,” the request is not transmitted.

    How information is shared

    The parties involved in routing your requests and what they see.

    When you submit an AI request, it travels through an OHTTP relay and a TEE-isolated gateway before reaching the provider for the model or feature you selected. The relay sees the originating network connection but cannot read the encrypted request. The gateway processes the request inside a remotely attested trusted execution environment without receiving your originating IP address or OpenGradient account identity. See How it works for the full breakdown.

    The selected provider receives the anonymized request content needed to return the result, but does not receive your name, email address, OpenGradient account identifier, or originating IP address from that request. Depending on the model and feature, providers may include OpenAI, Anthropic, Google, xAI, Nous Research, Zhipu AI, ByteDance, Tencent, Alibaba, Kuaishou (Kling AI), MiniMax, and the provider identified by the selected model. These providers are required to protect request content consistently with this policy and applicable contractual obligations.

    We share account and billing information with service providers acting on our behalf (for example, our payment processor and cloud infrastructure provider) under appropriate contractual protections. We may also disclose information when required by law, to protect rights and safety, or in connection with a corporate transaction.

    Data retention

    How long we keep what we keep.

    We retain account and billing information for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. Operational logs are rotated on a short rolling window.

    The OHTTP relay and TEE-isolated gateway retain AI request content only for the time needed to process and return the requested result. Selected providers process request content under their applicable service-provider terms and contractual obligations. Uploaded source media and generated outputs may be stored temporarily to complete processing and deliver the result. Generated video URLs normally expire within approximately 24 hours.

    Saved chat history lives on your device. You can delete individual conversations or clear local app or browser storage at any time.

    Your rights

    You have control over your account data.

    Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you. You can manage most of this directly from your dashboard, or contact us using the address below for anything else.

    Security

    The protections in place across our stack.

    Saved conversations are encrypted locally on your device. AI requests in transit are encrypted under the gateway's public key and processed inside a remotely attested trusted execution environment. We follow industry-standard practices to safeguard the account data we do store, including encryption in transit and at rest and strict access controls.

    No system is perfectly secure. We'll notify affected users promptly if we ever learn of a security incident materially affecting their data.

    Children

    OpenGradient is not intended for children.

    OpenGradient is not directed to children under 13 (or the applicable minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.

    Changes to this policy

    We'll let you know when meaningful changes happen.

    We may update this Privacy Policy from time to time. When we make material changes, we'll update the “Last updated” date above and, where appropriate, notify you in the app or by email.

    Contact

    Reach us for any privacy question or request.

    Questions about this policy or our handling of your data? Email privacy@opengradient.ai.