> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trynito.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy

> Common privacy questions: what your harness can see, what Private guarantees, the levels, and what Nito keeps.

Short answers on what is private and what is not. The full treatment is in the [Privacy](/privacy/overview) section.

#### Does using the plugin send my prompt to my harness's model provider?

It depends on the command. A plain `ask` runs inside your harness conversation, so your harness can see that prompt. `private` is the command built to keep a turn out of your harness's upstream entirely. See [Ask](/commands/ask-and-continue) and [Private](/commands/private).

#### What does Private actually guarantee?

A `private` turn is not sent to your harness's own model provider. What it does not do is turn off local disk writes or act as a sandbox by itself. The [Private](/commands/private) page spells out exactly what is and is not covered.

#### What are the privacy levels?

Anonymous, Private, Confidential, and Encrypted. The level follows the model you choose and never silently downgrades. Three of them work in this release; Encrypted is [coming soon to the plugin](/privacy/levels/encrypted). See [Privacy Levels at a Glance](/models/privacy-levels-at-a-glance) and [The Four Levels](/privacy/levels).

#### Can I verify the privacy claim myself?

Yes, for the attested levels. A Confidential call runs in a sealed environment and returns evidence you can verify independently, rather than asking you to take the claim on trust. See [Verify It Yourself](/privacy/tee-attestation/verify-yourself-recipe).

#### What does Nito keep about my prompts?

By default, metadata only. Prompts, completions, reasoning, tool payloads, and attachment contents are treated as request-local and are not persisted by Nito. What the model provider keeps is a separate question: at Private and above the provider is held to zero data retention, and at Anonymous it handles the request under its own terms with your identity detached. See [Data Retention and Visibility](/privacy/data-retention-and-visibility).

## Related Resources

* [How Privacy Works](/privacy/overview)
* [What Each Command Protects](/privacy/what-each-command-protects)
* [The Four Levels](/privacy/levels)