Privacy
Privacy starts with minimizing what moves
This candidate separates guest exploration from durable authenticated work and avoids presenting analytics convenience as permission to collect everything.
Guest exploration
The guest-understanding endpoint processes the text you send to produce a provisional response. Its beta audit event records a request hash and state rather than the exact message. The browser session can temporarily preserve your draft so it survives the sign-in transition.
Authenticated Formation
When you explicitly start a Formation after sign-in, the original request can become durable governed project intake data. That transition is materially different from guest exploration.
Provider and account data
Provider credentials are not intended to be placed in public page content or exposed back to the browser after save. Production retention, deletion, export and subprocessor terms must match the final activated services and agreement.