Information We Collect
We collect the following categories of information:
- Account Information: Email address, username, and encrypted password when you create an account.
- Conversation Content: Messages you send and AI responses, subject to your chat history settings.
- Usage Data: Token usage, model selections, feature usage, and session activity for billing and service improvement.
- Uploaded Files: Documents, images, and audio files you attach to messages, used solely to process your request.
PII Redaction — How We Protect Your Data
The MDPerform AI Portal includes a built-in PII (Personally Identifiable Information) redaction system that is enabled by default. When active, the system automatically detects and replaces sensitive information in your messages — including names, addresses, Social Security numbers, phone numbers, email addresses, and more — with safe placeholders before your message is sent to any AI model or stored in our database.
The original, unredacted text is never transmitted to AI providers and is never stored. Only the redacted version is used. You can configure which categories of information are redacted in your Privacy settings, or disable redaction entirely if you prefer.
Important: PII redaction is a best-effort assistive tool, not a guarantee of complete detection. No automated system can identify every form of sensitive data in all contexts — unusual formats, nicknames, abbreviations, or context-dependent references may not be caught. You remain responsible for the information you choose to enter. See Section 5 of our Terms of Service for full details on user responsibility.
How We Use Your Information
- Service Delivery: Processing your AI requests, maintaining chat history, and providing the features you use.
- Billing: Tracking token usage to manage subscription limits.
- Service Improvement: Anonymized, aggregated data may be used to improve response quality and system performance.
Anonymized Data for Service Improvement
Conversations from users with Standard or Save All history modes may be anonymized and used to improve AI response quality. This process involves:
- Removing all user identifiers (no user ID, account info, or chat ID is retained).
- Re-applying PII redaction as an additional safety measure to ensure no personal information remains.
- Storing only the anonymized prompt-response pairs in a separate database.
Users who select "Never Save" as their history mode are fully opted out of any data collection for service improvement. Their conversations are deleted immediately and are never harvested.
Data Retention
Your data retention is controlled by the chat history mode you choose in Settings:
- Never Save: Conversations are deleted when you start a new chat. No data is retained.
- Standard: Conversations are kept for 10 days, then automatically deleted. Pinned chats are kept indefinitely.
- Save All: Conversations are permanently saved. Older conversations are archived automatically.
You can change your history mode at any time in Settings. Account information is retained as long as your account is active.
Voice Mode Data Handling
The portal includes an optional voice mode for hands-free conversation. When you enable it, your browser captures audio from your microphone and streams it to our private speech-to-text service for transcription, and spoken replies are generated by our local text-to-speech service and streamed back to your browser.
Audio is never persisted. Microphone recordings are held in server memory only for the duration of the transcription request and are discarded immediately after. Synthesized speech is streamed live to your browser and is not written to disk or stored in our database.
The voice helper model. Each voice turn is briefly reviewed by a small locally hosted helper model that checks transcription quality, catches obvious truncation, and decides whether to handle the turn directly or forward it to the main AI. The helper's working context is assembled from the last few turns of the current conversation, sent with each request, and held in memory only. Any transient artifacts associated with a voice session are removed within one hour. The helper's context is never persisted to our database.
What is saved. Only the substantive exchanges that surface in your chat window are subject to your chat-history settings (Section 5). Brief conversational turns handled entirely by the voice helper are voice-only and leave no chat-history trace.
Best-effort feature; limits of liability. Voice transcription, the helper model, and synthesized speech are best-effort tools. Speech recognition may mishear words, misattribute speakers, or omit audio entirely. The helper model may misclassify or misroute a turn. Synthesized voices may mispronounce names, numbers, technical terms, or other content. Momentum Dynamic Performance makes no warranty as to the accuracy, completeness, or fitness for any particular purpose of voice-mode output, and assumes no liability for any loss, damage, missed information, miscommunication, or other consequence arising from your use of voice mode. You remain solely responsible for verifying any spoken or transcribed content before acting on it, and for ensuring that voice mode is appropriate for the environment in which you use it (including any obligations you may have regarding the recording or transmission of others' voices).
Native Signal Voice Calls
Separate from in-portal voice mode, a small subset of authorized users can place or receive 1:1 Signal voice calls directly with the locally hosted AI ("native voice calls"). These calls are placed by a private call-bot running on our internal AI server and traverse Signal's standard end-to-end-encrypted call infrastructure.
No audio is retained. Captured microphone audio, intermediate transcripts, and synthesized reply audio all live in server memory only for the duration of a call and are dropped when the call ends. No WAV file, PCM buffer, or transcript text is written to disk or stored in any database at any point in the call lifecycle.
Metadata only is logged. When a call ends, a single per-call metadata row is recorded: timestamp, call direction (inbound / outbound), the other party's Signal account identifier, the call's duration in seconds, and the reason the call ended (for example "user said goodbye", "silence timeout", "max duration reached", or "peer hangup"). This metadata is used for cost-control accounting (daily call cap) and operational diagnostics. It does not contain transcript content, reply text, or audio of any kind.
Cost controls and call hygiene. Native voice calls are capped at 10 outbound calls per day by default. Each call has a hard maximum duration (default 30 minutes) and an idle-silence auto-hangup (default 15 minutes); either timer ending the call is recorded as the termination reason. A user can end an in-progress call at any time by saying a wake-down phrase such as "goodbye Claude"; the assistant will speak a brief acknowledgment and hang up cleanly. The 11th outbound call attempt of the day is refused and (when triggered by a Signal text) the user receives a written text reply instead.
Outbound allowlist. Outbound calls can only be placed to Signal accounts explicitly listed in the call-bot's allowlist; requests targeting any other account are refused with no call placed. Inbound calls from non-allowlisted Signal accounts are silently ignored (the originating client times out as if no device answered).
Best-effort feature; limits of liability. Native voice calls inherit all of the disclaimers in the section above (Voice Mode Data Handling): speech recognition can mishear, the AI may give incorrect or incomplete answers, and synthesized speech may mispronounce content. Momentum Dynamic Performance makes no warranty as to the accuracy, completeness, or fitness for any particular purpose of native voice-call output, and assumes no liability for any loss, damage, missed information, miscommunication, or other consequence arising from your use of native voice calls. Recording any portion of a Signal call (by either party, by any means) is governed by your jurisdiction's two-party-consent or one-party-consent rules; you are solely responsible for compliance.
Third-Party AI Providers
When you select an external AI provider (such as Anthropic, OpenAI, Google, or X.AI), your messages are sent to their APIs for processing. PII redaction is applied before data is sent to any external provider.
By selecting a third-party AI provider, you acknowledge and accept that provider's own terms of service and privacy policy. Once your data has been transmitted to an external provider, that provider's policies govern how it is processed, stored, retained, or used — including for their own model training, unless their policies state otherwise. Momentum Dynamic Performance has no control over and assumes no responsibility for the data practices of third-party AI providers.
If you require full control over your data, select locally hosted models (Ollama or MDPerform RAG). When using local models, your data remains entirely on our private infrastructure and is never sent to external services.
Data Security
We protect your data with:
- AES-256-GCM encryption for stored API keys and sensitive configuration.
- JWT-based authentication with time-limited tokens.
- Rate limiting to prevent abuse.
- Network isolation — our AI infrastructure is not directly accessible from the internet.
- Regular security reviews and system hardening.
Your Rights
You have the right to:
- Control your data: Choose your chat history mode to determine how long conversations are kept.
- Delete conversations: Remove individual chats or set history to "Never Save" for automatic deletion.
- Configure privacy: Enable or disable PII redaction and choose which categories are protected.
- Opt out of data collection: Select "Never Save" history mode to fully opt out of anonymized data collection.
- Request account deletion: Contact us to permanently delete your account and all associated data.
Children's Privacy
The Service is not intended for users under the age of 18. We do not knowingly collect information from minors.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. The effective date at the top of this policy indicates when it was last revised.
Contact Us
For questions about these terms or our privacy practices, please contact your Momentum Dynamic Performance representative or reach out through the portal's contact form.