GNStudio.AI
How we use AI within your projects.
We work with AI every day, and some of that work touches your data. This page says where it may go, which AI providers may see it and on what terms, what every system we ship discloses, and what you take with you when we are done.
1 · Who this page is for
If you are a visitor, the privacy page already covers you: what this site collects, where it goes, and how to take it back. This page is for clients and for anyone deciding whether to become one. It says where your data may go when we work for you, which AI providers may see it, what every system we build discloses, and what you leave with. The rule we use is the privacy page's: if a sentence isn't true here, it isn't true in the work either.
2 · Where your data may go
Your data never goes into a consumer AI plan. For client work we use AI providers only under business or API terms that rule out training on your data; each one is listed below. We start handling your data in any of them only once we have a signed agreement with you. You choose at kickoff where your data may go. At close you leave with the repository: all the content, all the code, the architectural decisions, and a disclosure for every system we built.
Three situations cover everything we do.
Our own work
Our drafts, this website, our research. No client data is involved, so any tool may be used, including consumer plans. Which tool and which model helped is disclosed on the Trust Object of each page.
Your data, on business terms
Your data goes to AI providers only under business or API terms that rule out training on it, with a stated retention period and a named region, and only once we have a signed agreement with you. Never a consumer plan. Each provider is listed below.
Your data, in your own infrastructure
If your data must not leave your premises or your region, say so on the call: we scope the work around open-weight models you run yourself, or we spin up the models for your project into the desired region and infrastructure. We say plainly whether we have done it before.
3 · AI providers we use
This is the list a data-protection lawyer would call our AI subprocessors: every AI provider that may process your data when we work on business terms. For each one we say what we use it for, the terms we hold it under, whether it may train on your data, how long it keeps your data and where, and when we last checked. The provider's documents, which you receive with the agreement, carry the detail.
Anthropic · Claude
- What we use it for
- Drafting text and code
- Terms we hold it under
- Claude Enterprise. Before any of your data goes in, a signed agreement with you; you receive Anthropic's data documents: its data commitments, its SOC 2 report, and the data processing agreement
- Training on your data
- No: Anthropic's business terms rule it out
- Retention
- Conversations are kept until we delete them; a deleted conversation is removed within 30 days
- Region
- United States
- Last reviewed
Google · Gemini
- What we use it for
- Meeting notes in Google Meet, only when you agree; the notes are shared between you and us
- Terms we hold it under
- A Google Workspace business plan
- Training on your data
- No: Workspace business never uses your data for AI model training or improvement
- Retention
- The notes are a document in our Drive, shared with you, kept until either of us deletes it
- Region
- United States, by our Workspace data-region policy
- Last reviewed
Perplexity
- What we use it for
- Web research and fact checking
- Terms we hold it under
- Perplexity Enterprise Pro
- Training on your data
- No: your data, queries, and conversations are never used for AI model training or improvement
- Retention
- Files attached to a thread are deleted after seven days; threads, and files kept in a project, stay until we delete them
- Region
- United States
- Last reviewed
Open models on our own machines
- What we use it for
- Data manipulation and batch work with Qwen, Gemma 4, and other open-weight models, run on our own machines
- Terms we hold it under
- None: no provider is involved; nothing leaves the machine
- Training on your data
- No
- Retention
- Nothing is kept by a provider; what we keep is in the repository you leave with
- Region
- Our own machines, Pacific Northwest, USA
- Last reviewed
What is not on this list
Consumer plans: no client data ever goes into one. HubSpot's built-in AI features, which we switched off: getting in touch with us must not compromise anyone's privacy. The tools we use for our own work, where no client data is involved: they are disclosed on the Trust Object of each page and in the documents they helped draft, not here. And the two services that hold this site's own form requests and visit counts, HubSpot as a CRM and Amazon Web Services: they are on the privacy page.
Review cadence
We check every entry against the provider's current terms every three months and after any change in plan, internally; the latest check was on , before this site was published. The date under Last reviewed is the date we checked, not the date the provider last changed something.
4 · What every system we ship discloses
Every system we build for a client ships with a one-page disclosure, written by us and checked by you, with the eleven fields below filled in.
- System
- This website, gnstudio.ai
- Situation
- Our own work; no client data
- Model
- Claude Fable 5.1, for drafting the text and the code
- Terms
- Claude Enterprise, for drafting this site's text and code
- Training on your data
- None. HubSpot's built-in AI features are switched off; what you send through a form is used to reply to you, and for nothing else
- Data in and out
- In: what the three request forms collect, and the visit counts; both listed on the privacy page. Out: form requests go to HubSpot through our own service on Amazon Web Services in Oregon; visit counts stay on that service as daily totals
- Jurisdiction
- United States
- Retention at the provider
- Your request stays in HubSpot until you withdraw consent, then is deleted within 30 days; our service keeps a log line saying that a request arrived, for 14 days, and for up to two days a spam-check marker and a daily visitor hash; the daily visit totals are kept
- Human controls
- A person reads and answers every request; no AI drafts a reply. A person writes or approves every sentence and fills in every card by hand
- Exceptions
- None
- Audit date
- , when every “Check it yourself” statement was run against the live site
- Next review
- Reviewed by
- GNStudio.AI
5 · What you take with you
When an engagement closes, you leave with the repository we used to work for you: all the content, all the code, and the architectural decisions. From that day you are independent of us; if you come back, it is because you love the work. This is what “leave with an export” means on our home page. Vendors can be replaced; we can be the first to be unwound.
6 · How the Trust Object is made
The card at the foot of every page says how that page was made. Here is the rule behind its figures. Each page's card is filled in by hand on the review date shown. The human share is how much of the page came from a person: what it says, the claims it makes, the decisions behind them, and the sentences written or dictated by the owner. The AI-assisted share is what an AI assistant produced from that: the drafting of some sentences, and the HTML, the stylesheets, and the scripts that carry them. Across this site, between 85 and 90 percent of the content was written by hand by us. The two exceptions are the pages an assistant drafted from our decisions and we then rewrote: the privacy page, at 78 percent, and this one, at 82, as their cards say. The model named is the one used for drafting or, in some cases, for refining the communication. “Form data kept in” is where what you send through a form is kept. Visit counts are daily totals only, kept by our own service on AWS in Oregon, never in HubSpot. The figures are the owner's declaration by this rule, not an output of any tool; what can be checked from outside is under Check it yourself on the privacy page.
Until 3 November 2026 the card, at version 1.1, carried our estimate for each page without a published rule. On that day every page was re-declared under the rule above and the card became version 1.2; that is why some figures moved without the text changing (the home page from 82 to 90 percent).
7 · Questions and changes
We check the providers list every three months and after any change in plan, internally. The rest of this page changes when our practice does, and the effective date above changes with it. A question, or a sentence you think is wrong: write to our contact address with the subject “Trust”, and we answer within two business days. The address is kept out of this page's source so that spam harvesters cannot collect it, which is why it appears only with JavaScript turned on. Effective .