Privacy has always been core to PayPerQ — we store conversations locally by default, accounts are optional, and anonymous crypto payments are preferred. But "private" is not one setting. When you send a prompt to an AI model, what happens to that text depends heavily on which model you chose. To make that visible, every chat model on PayPerQ carries a privacy tier badge: Anon, ZDR, or E2EE. This post explains what each one really means, so you can match the model to the sensitivity of what you're asking.

The Three Privacy Tiers

The tiers describe one thing: what the model provider can see and keep after your prompt leaves PayPerQ. By default your conversations are stored locally in your browser; if you create an account, we store your history so you can pick up conversations across devices. But regardless of how your history is kept on our side, downstream handling by the model provider varies by model — and the badge tells you exactly how.

• Anon — The model provider may retain prompt data, but requests are sent without account linkage. This unlinks the request from your identity; it does not strip personal information you type into the prompt itself. Think of it as anonymized, best-effort retention.
• ZDR (Zero Data Retention) — Requests are routed only to provider endpoints that have contractually agreed not to store prompt or completion data. The data flows through, generates a response, and leaves no persistent record. Nothing is logged or used for training.
• E2EE (Trusted Execution Environment) — The model runs inside a hardware-isolated secure enclave. Your prompt is encrypted on your device and is never accessible to PayPerQ or the provider in unencrypted form. This is the strongest tier.

At a Glance

Tier	Provider can read your prompt?	Provider can store it?	Encrypted end-to-end?	Best for
Anon	Yes	Possibly (per provider policy)	No	Everyday queries where you want identity unlinked
ZDR	Yes (in-memory only)	No — deleted after the request	No	Sensitive prompts where retention/training is the concern
E2EE (TEE)	No	No	Yes — decrypted only inside the enclave	Maximum-confidentiality work

What Each Tier Protects Against

Choosing a tier is really about choosing your threat model.

Anon breaks the link between a request and you. It's useful when the concern is a provider building a profile tied to your account or identity — the prompt content still reaches the provider, so avoid putting secrets in it, but there's no account it can be attributed to.

ZDR targets a different risk: retention and training. Under a zero-data-retention arrangement, prompts and completions are not logged, not used to improve models, and not kept beyond the immediate call. In the wider industry this typically requires a negotiated enterprise agreement — on PayPerQ's web app, ZDR-badged models route exclusively through those endpoints for you automatically. (When using the PPQ API, Zero Data Retention is opt-in per request.)

E2EE / TEE is the strongest guarantee because it removes trust from the equation entirely. Modern confidential-computing GPUs (such as NVIDIA H100-class hardware) run inference inside a hardware-attested enclave — your prompt is encrypted in the browser, stays encrypted through our servers, and is decrypted only inside that enclave. Not even PayPerQ can read it. If you want the full technical breakdown, see our dedicated post, Introducing Private AI Models.

How to Choose

• Just want your usage unlinked from your identity? An Anon model is fine — and it's the widest selection.
• Working with sensitive material and worried about it being stored or trained on? Pick a ZDR model.
• Handling something that must never be readable by anyone but you? Use an E2EE (TEE) model.

A good rule of thumb: the more you'd mind a third party ever seeing the prompt, the higher up the tiers you should go.

How to Use on PayPerQ

Every chat model shows its privacy tier badge right in the model selector. Hover over any badge to see exactly what it guarantees, or open our Privacy section for the full definitions.

What is PayPerQ?

PayPerQ is a pay-per-query AI service that gives you instant access to hundreds of chat, image, video, and audio AI models in one place. Unlike traditional ChatGPT subscription that charges $20+ per month, PPQ users pay only for what they use—averaging just $4 a month.

Account registration optional. No monthly commitments. Privacy focused. Credit cards and all major cryptos accepted. Just top up with as little as 10 cents and start using premium AI immediately.

Why Use PayPerQ?

• Access hundreds of AI models from all major providers in one place
• Pay per use - no subscriptions, no wasted money on unused credits
• No registration required - start using AI in seconds
• Start small - top up with as little as 10 cents
• Privacy-first - conversational data stored locally by default
• Average cost: ~1 cent per query

Getting Started

1. Visit ppq.ai
2. Top up your balance (crypto or credit card, as little as 10 cents)
3. Select your model and start chatting

No account creation needed—just fund and go.