{"version":1,"scope":["/ide-api/v1","/customer-api/v1"],"storage":"metadata-only","request_content_storage":false,"response_content_storage":false,"request_body_hash_storage":false,"server_prompt_storage":false,"server_prompt_injection":false,"processing":"Request and response content is processed in RAM while the request is active.","user_history":"Conversations remain on the user device in IDE local storage. Hosted-gateway privacy does not disable or delete local chat history.","retained":["Account and Telegram identifiers","API key hashes and connection credentials","Balances, payments and key limits","Request identifier, model, protocol, timestamps, state, token counts and charges","Idempotency identifiers and notification preferences"],"metadata_retention":"No automatic expiry for financial and account records. Expired login sessions and temporary notification observations are removed separately.","backups":"Private backups retain account/configuration and accounting data; conversation content and saved server prompts are removed from snapshots.","transformations":["Authentication and access checks","Model identifier mapping and protocol adaptation when required","Output limits and streaming usage counters","store:false for Chat Completions and Responses"],"unsupported":["store:true","previous_response_id","background:true","Retrieval of stored responses"],"upstream":"The model provider receives request content. Its retention policy is separate and is not controlled or guaranteed by ZeroGuard.","legacy_relay":"/llm-api/v1 forwards to a separate local runtime. Local IDE history and that runtime configuration are outside this hosted-gateway policy."}