I’m considering using DeepSeek through an inference service rather than calling a provider directly. Before sending any work-related text, I want to understand what happens to prompts and outputs after a request finishes.

What should I look for in a provider’s prompt retention policy—for example, logging periods, use for model improvement, or access by support staff? If you’ve evaluated a hosted endpoint, what details did you verify before trusting it with non-public data?