---
id: PR-2
title: What is sent, and what never is
group: Your data and privacy
summary: Where each kind of information goes — your organization, the AI service, our servers — and what stays out of all of them
keywords: [privacy, data, sent, secrets, model, ai, keys, passwords, card, servers]
---

Streamliner moves three kinds of information, and each goes somewhere different.

## Ordinary work

What you write, and what your organization's systems answer (customer names, contact details, items, orders, purchase history), goes to the AI service so the assistant can understand and act on it. In an organization it travels through your organization's account on our servers; on this device (free) it goes straight from your device to the service.

Files you attach go with your message, so the assistant can read them (photos lose their location and camera details first); a scanned code goes as its kind and value, never a picture; and when you talk, only the text goes: your voice is turned into text on the device and no audio leaves it. See Attaching files (ST-6), Scanning barcodes and QR codes (AS-6) and Talking and listening (AS-7).

The tools themselves are called straight from your device to your organization's systems, with your own sign-in; the call does not pass through our servers. What a tool answers then becomes part of the chat the assistant reads.

## Secrets

Secrets never go to the AI service and never into a chat: card numbers, social security and other ID numbers, dates of birth, license numbers, passwords and sign-in codes. They go only through:

- **secure forms**, from your device straight to your organization's system (see Secure forms and secure views, AS-3);
- **payment pages**, run by the payment processor in a browser the app cannot see into;
- **sign-in pages**, belonging to the system you sign in to.

The assistant learns only the outcome: *Financing approved*, *Card ···· 4242 captured*.

If you type something that looks like a card or ID number into the composer, the app warns you before sending. See Writing to the assistant (ST-3).

## Keys and sessions

- **Your organization's AI key** stays on our servers. It never reaches your device, and no one in the chat can see it.
- **Your own model key** (on this device, free) stays in this device's Keychain and goes only to the model's provider, with each request. It never goes into a chat, never to the assistant, and never to us. See The Vault (FR-5).
- **Your sign-ins to systems** stay on this device. They never sync and never reach the assistant.

## What your organization sees

Your organization keeps a record of its chats: your messages, the steps taken, including steps that were refused, the cards and your taps. Secrets are never in it, only their outcomes. See Where your chats are kept (PR-3).