Minimize the record.

Source and rewritten text are not stored by Primosa and are excluded from application logs. Text is transmitted to OpenAI to perform the rewrite. Even with application storage disabled, OpenAI may retain API content temporarily for abuse monitoring under its current data controls.

Selected files are processed entirely in the browser. They are not uploaded to Primosa, do not appear in Fastify request logs, and are released through a temporary browser blob URL that is revoked after download begins.

For abuse and cost control, Primosa keeps short-lived aggregate counters keyed by an HMAC-derived representation of an IP address. Raw IP addresses, prompt text, output text, file names, and file contents are not intentionally logged. Hosting and network providers may process connection metadata under their own policies.