ToS + privacy: make model/provider agnostic; user assesses per-model affordances

privacy-policy.md

@@ -5,7 +5,7 @@
 ## In plain language
 
 - We collect only what we need: your email, name, and basic usage data.
-- **Some models are private by design** — inference runs in encrypted enclaves we cannot read. **Others are chosen for renewable energy or open development, not architectural privacy.** Pick the model that matches your needs.
+- We offer a **changing variety of models with different privacy and value affordances** — some run in encrypted enclaves we cannot read, others differ. **You are responsible for assessing each model's properties and picking the one that fits your needs.**
 - We **do** store your chat history on our server (so you can revisit it). We promise not to read it, but this is a promise, not a technical guarantee.
 - We never train on your data, and we never sell it.
 - You can export or delete your data at any time.
@@ -28,13 +28,14 @@ The Inference Cooperative is a member-governed project. We are **not** an ad-sup
 
 ## 3. Privacy depends on the model you choose
 
-We serve models from multiple providers, and they do **not** all offer the same privacy. You choose per task:
+We serve a **changing catalog of models from multiple providers, and they do not all offer the same privacy**. Models differ in their affordances — some run inference inside **encrypted enclaves** (TEEs) where inputs and outputs are not readable in plaintext at the inference step; others are selected for renewable energy, openness, or cost rather than architectural privacy. The set of available models, and their properties, will change as members decide.
 
-- **Privacy-protected models (Tinfoil)** run inference inside **encrypted enclaves** (TEEs). Your model inputs and outputs are encrypted end-to-end, so **even our own infrastructure cannot read them at the inference step.** This is verifiable through remote attestation — a property of the system, not a promise.
-- **Renewable-energy models (GreenPT)** run on 100% renewable infrastructure. Their protection is about energy, not architectural privacy — inputs and outputs are processed under GreenPT's own terms and data-processing agreement, not in an enclave.
-- **Publicly developed models (PublicAI / Apertus)** are fully open. They likewise are chosen for open development, not architectural privacy.
+**You are responsible for assessing each model's privacy and value properties and choosing the one that fits your needs.** As a rule of thumb:
 
-**The distinction matters.** If you need the strongest privacy, use a Tinfoil model. If you choose a GreenPT or PublicAI model, be aware that your inputs and outputs are not encrypted in a way that prevents them from being processed in the clear. We never read or sell your data regardless of model — but the *architectural* guarantee exists only on the Tinfoil path.
+- Some models run inference in encrypted enclaves, verifiable through remote attestation — a property of the system, not a promise.
+- Other models are processed in the clear under their provider's own terms and data-processing agreement.
+
+We never read or sell your data regardless of model — but the *architectural* guarantee applies only to models that offer it. Check the current model catalog and each provider's terms before relying on a particular model for sensitive material.
 
 ## 4. What we *can* see (an honest caveat)
 
@@ -58,9 +59,8 @@ Web search runs through our self-hosted search instance. Search queries are forw
 
 ## 7. Third parties
 
-- **Tinfoil** — provides encrypted (TEE) inference; its privacy and data-processing terms apply.
-- **GreenPT** — provides renewable-energy inference; its terms and data-processing agreement apply (EU-hosted, GDPR-compliant).
-- **PublicAI** — provides openly developed models (Apertus); its terms apply.
+The models we serve are provided by third parties that change over time, each with its own terms and privacy posture. We never sell your data, but when you use a model, that model's provider processes your inputs under its own terms and data-processing agreement — some in encrypted enclaves, some in the clear. Review each provider's terms before relying on it for sensitive material. Our current providers are listed in the model catalog.
+
 - **Open Collective** — handles billing and membership (their own privacy policy applies).
 - **Cloudron** — our self-hosted platform; no third-party cloud provider.
 - **Search engines** — receive your search queries (see §5).