The Privacy Gap in AI

When you use ChatGPT, Claude, or Gemini directly, the provider knows exactly who you are. Your account, your email, your payment info, your conversation history. Every prompt you send is tied to your identity.

That means the AI provider can associate every question you ask, every document you analyze, and every idea you explore with you personally.

How Octofy Changes This

Octofy sits between you and the AI provider, acting as an obfuscation layer. Think of it like a VPN for your AI conversations.

Here's the flow:

1. You send a message to Octofy. Your prompt travels from your browser to Octofy's servers. This connection is encrypted, and your identity is known only to Octofy.

2. Octofy forwards your prompt to the AI provider. The provider receives the prompt, but it comes from Octofy's account, not yours. The provider sees the content of your message but has no way to connect it to your personal identity.

3. The provider sends the response back to Octofy. Octofy receives the AI's response.

4. Octofy delivers the response to you. The response arrives in your chat, encrypted and stored securely.

What the AI Provider Sees

The AI provider receives the full text of your prompt because it needs the content to generate a response. But it only knows that the request came from Octofy. It does not see:

• Your name or email
• Your account details
• Your IP address
• Any personal identifiers

Your questions and answers cannot be traced back to you. The provider sees Octofy as the sender, not you.

What Octofy Stores

On Octofy's side, your prompts and responses are stored in an EU-hosted, encrypted database. The association between your account and your conversations exists only within Octofy's infrastructure, protected by strong encryption and EU privacy laws.

This separation is the core of the privacy model:

• The AI provider has your content but not your identity
• Octofy has your identity but encrypts your content
• No single party holds both your identity and your unencrypted content in a jurisdiction that could compel disclosure to foreign governments

EU Jurisdiction

Octofy's servers are hosted in Finland by a Finnish provider. Your user data is stored within the EU and protected by GDPR and Finnish privacy law. It is not subject to the US CLOUD Act or FISA, which means foreign governments cannot compel access to your data through US legal mechanisms.

BYOAK: Even More Control

If you bring your own API key, the dynamic shifts further. Requests go through your own provider account, but you choose that relationship directly. Octofy still handles the interface and features, but the API relationship is yours to manage.

The Bottom Line

Using AI should not require giving up your privacy. Octofy's architecture ensures that the AI providers who process your prompts can never connect them to your personal identity. Your data stays yours.