**Your prompts, uploads, Bibles, outputs and finished films are never used to train,
fine-tune or evaluate any model** — ours or a provider's. That is a contractual commitment, not a
setting you have to find and switch off.
### The precise part
Routing analytics do use data: which model ran, how long it took, whether you kept the result,
and what shot type it was for. That is metadata. No prompt text, no image, no audio and no script
content is in it.
We state both halves because a pledge that hides the second one is a pledge that stops being true the
first time somebody audits it.
### Providers too
Every model provider we route to is contracted on zero-retention, no-training terms. A provider that
will not agree is not added to the Router.
### Deletion
Deleting a project removes its assets, graph and provenance from live systems immediately and from
backups within thirty days. The one exception is consent records for voice and likeness, which are
retained anonymised — they are the proof permission was given, and destroying them would destroy the
defence of everyone who relied on them.
### SOC 2
Firefly Reels is not SOC 2 certified. There is a readiness programme, and the
[trust page](/trust) lists every control with its real state — in place, partial, or not yet started
— and the evidence for each. Nothing is rounded up.