ENTRUST AI

Privacy Policy

ENTRUST AI APEX

APEX is a certification service for writing, made by ENTRUST AI. You use it inside ChatGPT: you ask for a piece of writing, or send your own, and APEX has it written and examined against its release rules. It is released only if it passes, and the release carries a signed receipt. This page says, in plain words, what APEX keeps about you and what it does with your text.

Who we are

ENTRUST AI, Monsey, New York, United States. Questions about this policy go to contact@entrustai.co.

What we keep about you

• Your sign-in. The first time you use APEX you sign in once, with Google or with a code we send to your email. We keep your email address and, if you used Google, the name Google gives us. Sign-in is handled by Supabase, our database and sign-in provider, and sign-in emails are sent through Resend. From then on APEX knows you by an internal account number; every request you make is filed under it.
• Your replies and payments. How many certified replies you have, each reply set aside and whether it was charged, and each payment: the pack bought, the amount and Stripe's reference for it. Payments are taken by Stripe; your card details go to Stripe and never reach us. These records are kept for as long as your account exists.
• Your requests and your text. The request you type, any text you paste, any file you attach together with the text read from it, the chat messages sent to APEX with a request, and the result APEX produces are stored in Supabase, encrypted. Each is kept for 30 days, extended while you are still using that request, and then deleted.
• Working records of each run. The service runs on Railway. While it works on a request, APEX keeps a working record of that run on the service's own disk. For a certified result, that record includes the certified text and its receipt, not encrypted. For a result that is not certified, or a run that broke down, the full working record is kept encrypted. Either record is kept for 30 days and deleted when the service next clears its old runs.
• The progress log. For each request, APEX keeps a log of what happened: its steps, outcome, timings, the names of attached files, any question APEX asked you, and, when a text was not certified, the findings that explain why. Findings describe your text and can include short phrases about it. This log is not encrypted and is not yet deleted on a schedule; if you ask us to delete your data, it is deleted with the rest.
• Receipts. Every certified result carries a signed receipt. A copy is published under its Run ID so that anyone holding the number can check it at entrustai.co/verify, and it is kept indefinitely. A receipt holds fingerprints (hashes) of your text and of your request, the signature, the model used, the outcome of each check, and technical details of the run, such as the name of its folder on our server. It never holds your text; but someone who already has the exact text can confirm that it matches the receipt. Receipts for results that were not certified are not published.

What happens to your text

To write and examine your text, APEX sends it to OpenAI's models through OpenAI's API, under OpenAI's API terms. OpenAI states that data sent through its API is not used to train its models; that is OpenAI's undertaking, and we rely on it. No one else is given your text. We do not sell it, share it with advertisers, or use it to train anything of our own.

ChatGPT itself, where you use APEX, is OpenAI's product and is covered by OpenAI's privacy policy, not by this one. What ChatGPT shows you, remembers, or shares with APEX is governed there.

What we do not do

• We do not sell or rent anything about you.
• We do not set advertising or tracking cookies. The sign-in page keeps only what it needs to remember that you signed in on that browser.
• We do not read your text ourselves in the ordinary course of running APEX. We would look at a stored run only to investigate a breakdown, or where the law requires it.

Your choices

• Delete your data. Write to contact@entrustai.co from the address you signed in with and we will delete your account, your stored requests and results, their working records and their progress log. This is done by hand, within 30 days of your request. Receipts stay, because they hold no text and other people may be relying on them to check a letter; payment records stay where the law requires us to keep them.
• Disconnect. In ChatGPT you can disconnect APEX at any time under Settings; that ends its access to your chats.
• A copy of what we hold. Ask at the same address and we will send it.

Children

APEX is not directed at children under 13, and we do not knowingly keep anything about them.

Changes

If this policy changes, the effective date at the top changes with it. Material changes will be announced on this page before they take effect.

Governing law

This policy is governed by the laws of the State of New York, United States.