Pantheon Privacy Policy

Pantheon is designed so model usage runs through platform-owned server-side API keys for ChatGPT, Claude, Gemini, and Grok. We do not expose those provider keys to end users through the browser.

How Pantheon handles provider access

Provider requests are routed through Pantheon servers. End users do not paste provider API keys into the product, and Pantheon does not store per-user provider API keys as part of the account flow.

Pantheon does not write provider secrets into run.json, transcript.md, or summary.md, and saved run artifacts are built to exclude secret values.

What gets saved

Pantheon saves conversation artifacts such as:

The user prompt
The selected providers and models
The transcript of model responses
The final synthesis
Status metadata for resume and debugging

Important note

No local or self-hosted app can promise absolute security. You should still only use Pantheon on machines and servers you trust, protect your browser session, and rotate keys if you believe they were exposed elsewhere.

Contact and responsibility

If you deploy or modify Pantheon yourself, you are responsible for your own hosting, logs, infrastructure, and operational security practices.