Data used by assisted features
What Pombo sends to an AI provider, what it does not send, and how requests are handled.
This page explains what happens to data when you use a feature that asks an AI provider for help. The policy applies to every account and cannot be turned off for an individual request.
Requests use zero-retention providers
Pombo reaches models through OpenRouter, and every request is pinned to providers that meet two conditions:
- Zero retention. The provider does not store the prompt after answering.
- No training. The provider does not train on what we send.
Pombo sends these requirements with every request. If no provider can meet them, the request fails. Pombo does not fall back to an endpoint that may keep your text.
One consequence worth knowing: this sometimes changes which company answers. The same model may be served from a different provider than its parent lab, because that is the route that meets the policy.
Contact records are not sent to a provider
When you describe a segment, Pombo sends the shape of your data: field names, field types, and tag names. It does not send your contact list. Pombo runs the resulting filters against your database.
The same holds for goals and sequence conditions.
What is sent
- The text you type into an AI feature: your prompt, your instructions.
- Your brand voice settings, so drafts sound like you.
- The template you are editing, when you ask the assistant to change it. That is your copy and your MJML.
- Your schema, as described above.
What is not sent
- Contact rows: email addresses, names, custom field values.
- The content of mail your recipients received.
- Your API keys, credentials, or sending domain secrets.
- Analytics event data.
Everything is recorded
Pombo stores each request against your organization with the model used, the time it took, and input and output token counts. This gives you an audit record for assisted work.
You are still the one who sends
An assisted draft waits for your review. Sending it is subject to every sending gate: account approval, a verified domain, permission attestation, and your weekly cap. An agent working on your behalf follows the same gates and has its actions logged.