Lots of discussion around Venice's privacy model last few days. Glad to see this as an important topic! To date, Venice is private in that prompts and responses are not stored on Venice servers. They are not retained. They can not be viewed or extracted later. This is private, but it is not provable. Venice users are not mainly crypto people, and for them, the above has been sufficient (empirically, given the growth). But proving the privacy is much better, and we need to do so. This has been on our roadmap since inception. But delivery means everything. Provable privacy will be delivered soon.(Erik Voorhees)