Legal/AI and your data
AI and your data
Last updated Oct 23, 2026
01At a glance
| Where | What is sent | Who runs the model |
|---|---|---|
| CLI with ZOREVA-UI models | Your prompts and the project context the agent includes in a request | The model provider, through our AI infrastructure |
CLI with your own key (/keys) | The same request, sent to the provider you chose | That provider, under its terms |
| MCP server | The tool name and the arguments your editor sends | No model runs on our side; your editor uses its own AI |
02The CLI
When you use ZOREVA-UI models, your prompts and the project context included in a request are sent to our servers and then to the model provider through our AI infrastructure to generate a reply.
We also keep request metadata: the model, token and credit counts, timestamps, CLI version and operating system. That's how AI credits are counted.
If you connect your own provider key with /keys, those requests go to that provider under its own terms.
03The MCP server
The hosted MCP server returns catalog content such as shaders, icons and composition downloads. It doesn't send your code to a model. Your editor (Cursor, Claude, Codex and others) runs its own AI under its own policy.
For security, abuse prevention and debugging we log each tool call: the tool name, your account and a trimmed copy of the arguments. Text is cut to 240 characters and fields that look like secrets are redacted. Don't put secrets in tool arguments.
04Training
We don't use your prompts, code or files to train AI models. Our AI infrastructure provider doesn't use inputs or outputs to train models. Requests made with your own key follow that provider's terms.
05Retention
We don't keep prompt content longer than needed to process the request, except where needed to investigate abuse. Request metadata and logs are kept only as long as necessary, then deleted or de-identified.
When you delete your account, your account data is deleted within 30 days. The full rules are in the Privacy Policy.
06Crash reports
Off by default. Turn them on with /telemetry on.
07Providers
The services that process this data are listed on Subprocessors. Security practices are on Security. Questions: legal@zoreva-ui.com.