You're right that the content goes to an LLM provider. That's unavoidable if the thing is to work. I don't (and won't) sell your data. But you're right that I can't control what LLM providers do with API traffic under their policies. That's a real tradeoff. I think that's a valid concern, and I don't have a great answer for it.