Plain talk about your content.

When you run a deliberation, your question and every model response pass through Quorum's servers on their way to and from the AI providers. This is true on every plan, including BYOK. Our servers see deliberation content in-flight in order to orchestrate the council, stream responses to you, and synthesize the verdict.

With retention enabled — the default — your deliberations are stored so you can return to them. Stored content is encrypted at rest. You choose how long completed deliberations are kept before automatic deletion (30 days, 90 days, a year, or indefinitely) in Settings → Privacy.

With no-retention mode enabled, your deliberations still pass through Quorum's servers to reach the providers, but nothing is written to storage. Transcripts exist only in memory for the duration of the deliberation, then are deleted.

We want to be precise rather than reassuring: no-retention mode means we do not persist your content, but Quorum operators could technically observe content while it is being processed in memory. If you require that Quorum never sees your content at all, that is a different model — a direct browser-to-provider bridge — which we do not offer today.

Deletion is not always instantaneous. Content you delete — or that expires under your retention setting — may persist in encrypted database backups for up to 7 days before those backups roll off. We do not restore deleted content except to recover from a system failure.

No deliberation content is ever used to train models — neither ours nor the providers'. Your content is used only to produce the deliberation you asked for.

API keys you add are encrypted at rest. Only the last four characters are ever shown back to you, and keys are never exposed to other users or returned in API responses.