# Zero data retention LLM API, no training on your data
URL: https://docs.munito.ai/data-privacy

The Munito AI API is an LLM API with zero data retention by default: Munito AI keeps no prompts or outputs, and it does not train models on your data. Munito AI does not sell your data.

## The default: zero data retention [#the-default-zero-data-retention]

Munito AI processes your prompts, documents, images, audio and outputs only to answer your request. After delivery, Munito AI removes the temporary request content.

| Promise                               | Where it is stated                                                                                   |
| ------------------------------------- | ---------------------------------------------------------------------------------------------------- |
| Zero data retention by default        | [Terms of Service](https://legal.munito.ai/terms), [trust center](https://trust.munito.ai)           |
| No training on your inputs or outputs | [Terms of Service](https://legal.munito.ai/terms), [Privacy Policy](https://legal.munito.ai/privacy) |
| No sale of personal data              | [Privacy Policy](https://legal.munito.ai/privacy)                                                    |

The same policy applies in each [service tier](https://docs.munito.ai/service-tiers) and each [region](https://docs.munito.ai/regions).

## What Munito AI stores only when you ask [#what-munito-ai-stores-only-when-you-ask]

Some features keep your content so that you can read it later. Each one starts only when your request asks for it.

| Feature                                                 | How you turn it on | How long Munito AI keeps it |
| ------------------------------------------------------- | ------------------ | --------------------------- |
| [Responses](https://docs.munito.ai/api/createResponse)              | `store: true`      | 30 days                     |
| Background responses                                    | `background: true` | 30 days                     |
| [Chat completions](https://docs.munito.ai/api/createChatCompletion) | `store: true`      | 30 days                     |

The Responses API does not store a response by default. This is different from OpenAI, where `store` defaults to `true`. Delete a stored response at any time with [`DELETE /responses/{response_id}`](https://docs.munito.ai/api/deleteResponse), and a stored chat completion with [`DELETE /chat/completions/{completion_id}`](https://docs.munito.ai/api/deleteChatCompletion).

Stored data stays in the data region of your workspace. See [GDPR and EU data residency](https://docs.munito.ai/gdpr-data-residency).

### Check that a response is not stored [#check-that-a-response-is-not-stored]

```bash
pip install openai
export MUNITO_API_KEY="munitoai_..."
```

```python
import os
from openai import OpenAI

client = OpenAI(
    base_url="https://api.munito.ai/inference/v1",
    api_key=os.environ["MUNITO_API_KEY"],
)
response = client.responses.create(
    model="qwen/qwen3.8-27b",
    input="Name one planet.",
    max_output_tokens=2048,
)
print("Stored:", response.store)
print(response.output_text)
```

The script prints `Stored: False`. A later request with `previous_response_id` needs a response that you created with `store: true`.

## What Munito AI records about each request [#what-munito-ai-records-about-each-request]

Munito AI records usage data to bill and operate the service: the model ID, the time, the token or page counts, the request status and the API key. This record does not contain your prompts or outputs.

Munito AI's logs follow an allow list. The code can write only the fields that it declares safe, and prompts, documents and outputs are not among them. An automated test on each code change keeps it so.

Account, security, support and billing records have their own purposes and retention periods. The [Privacy Policy](https://legal.munito.ai/privacy) describes them.

## Overflow [#overflow]

[Overflow](https://docs.munito.ai/overflow) is off by default. When you opt in with the `munito-overflow` header, another model or another inference provider can answer a chat request that Munito AI's own capacity cannot serve.

- For an EU request, the provider is a company that is based and regulated in the EU.
- The provider keeps no request content and does not train on it.
- The request keeps zero data retention and the price of the model that you asked for.

The [trust center](https://trust.munito.ai/subprocessors) marks the sub-processor that serves overflow as "Opt-in only".

## Data in the console [#data-in-the-console]

The console playground keeps your chats and their attachments in your browser, so that they stay across reloads. Delete a chat, or clear the whole history, in the playground. These browser copies are separate from the API.

When an owner deletes the organization in the console settings, account data leaves the active systems within minutes. The [Privacy Policy](https://legal.munito.ai/privacy) gives the full terms, also for backups.

## Related pages [#related-pages]

- [GDPR and EU data residency](https://docs.munito.ai/gdpr-data-residency)
- [Security](https://docs.munito.ai/security)
- [Overflow](https://docs.munito.ai/overflow)