provider-privacy-analysis

Audit AI inference providers for data retention, training policies, and gateway routing risks.

Updated May 10, 2026
One-click install
npx skills add https://github.com/cookkie03/skills --skill provider-privacy-analysis-cookkie03
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: provider-privacy-analysis
Source: https://github.com/cookkie03/skills/tree/main/provider-privacy-analysis
Command: npx skills add https://github.com/cookkie03/skills --skill provider-privacy-analysis-cookkie03

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Evaluating whether an AI inference provider trains on your prompts, retains your data, or silently routes requests to third-party hosts requires digging through dense privacy policies and terms of service. This Skill structures that investigation into a repeatable audit covering provider archetype, free-tier privacy discrimination, zero data retention availability, and jurisdiction exposure. ## Core Features & Use Cases - Provider Classification: Identifies whether a platform is a first-party model builder, dedicated inference host, or intermediary gateway forwarding payloads to third parties. - Privacy Matrix Generation: Produces a standardized comparison table covering training-on-payloads defaults, paywalled privacy controls, retention periods, ZDR availability, and data residency. - Opt-Out Action Plans: Delivers step-by-step hardening instructions covering account settings, API parameters, cookie controls, and local self-hosted alternatives. - Use Case: Before adopting a free LLM API tier, run an audit to discover that free-tier prompts are used for training by default, then follow the generated opt-out steps or switch to local GGUF weights. ## Quick Start Audit the privacy and data retention policies of the OpenRouter inference provider and give me the full opt-out action plan.

Frequently Asked Questions about provider-privacy-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if an AI provider trains on my prompts?▼

Audit the provider's default stance on using prompts, completions, and attachments for model training or fine-tuning. The audit classifies whether training is on by default for free tiers and identifies exact opt-out toggles, API parameters, or settings pages to disable it.

What is gateway passthrough risk in LLM APIs?▼

Gateway passthrough risk occurs when an intermediary platform routes your requests to external third-party hosts like Together, Fireworks, or AWS Bedrock. Your payloads then fall under disparate third-party terms of service and privacy policies outside your visibility and control.

Do free AI API tiers have worse privacy than paid plans?▼

Many providers reserve zero data retention, training opt-outs, and DPAs for paid or enterprise tiers while using free-tier prompts for training by default. The audit's tier discrimination analysis identifies exactly which privacy controls are paywalled.

How can I eliminate cloud privacy exposure when using LLMs?▼

Deploy open-weight models locally using GGUF, MLX, or ONNX formats to bypass cloud tiers entirely. Local execution achieves zero data retention, removes third-party terms exposure, and eliminates foreign surveillance law risks like the US CLOUD Act.

What is zero data retention and which providers offer it?▼

Zero data retention means prompts and completions are never written to persistent storage, unlike typical 30-day abuse logging. Availability varies by provider and is often restricted to enterprise plans, which the audit's privacy matrix documents per provider.