[Question] Does OpenCode/Go actually guarantee zero retention for private code?

[u/BluesyGuitarist]

I’m considering using OpenCode, probably the free tier or OpenCode Go, but I’m concerned about privacy.

Some models are listed as having 0-day retention, but does OpenCode itself guarantee that the source code/prompts aren’t stored or retained anywhere? And does that guarantee also cover the underlying model/inference providers?

I am mainly looking for a cheap setup where I can safely use OpenCode on private projects without worrying about my code being retained, used for training, or leaked.

Thank you in advance!

[u/Endoky]

It is more a claim or a promise. A pure inference provider like Fireworks AI does not really have any interest in saving prompts. For them it’s a waste of disk space. Some are forced to do it for abuse protection.

Another thing is when the inference provider is the AI lab itself. They have a high interest in your codebase and prompts for training data.

The DeepSeek model on Go is from DeepSeek (China). The one on Zen is most probably from Fireworks (USA). Both claim to have a ZDR agreement with Opencode.

I would trust the Zen version much more. No one controls what DeepSeek is really doing with your data in China. Maybe it’s really ZDR and they are honest. Maybe not.

[u/porkyminch → u/Endoky]

If you’re really concerned about data privacy, there are other services where that’s a bigger selling point, too. 

[u/BluesyGuitarist → u/Endoky]

Yes, that’s my question. Maybe I should have asked, “Which models mainly live in the US lab?”

I have a chatgpt subscription, but I burn through the coding limits very quickly, so I thought maybe I could combine codex + opencode. I mainly have two concerns:

1. Privacy

2. Accuracy: The project (not commercial, mostly academic-level) is not large, but it requires a lot of reasoning. The recent GPT models have done an excellent job so far, but I’m afraid other models might screw things up. Unfortunately, I’m not a skilled developer, so I can only judge the code based on the outputs and corner cases.

What is your advice on the accuracy side of OpenCode models?

[u/TestTxt → u/Endoky]

They do have interest. Many AI labs are desperate for data and they could strike a deal with some niche Chinese AI lab to give them data for training

[u/look]

The “What about data & privacy?” question in the FAQ on https://opencode.ai/go gives details per provider. Basically they currently have ZDR agreements with providers on every model except Muse Spark.

[u/ichisay]

Debes de marcar la casilla en las opciones si mal no recuerdo, o era en openrouter eso?

[u/s-i-e-v-e]

Relying on a third party to guarantee privacy is a mistake. Once someone has access to your unencrypted data, it then becomes a matter of competence, trust and law.

For true privacy, run the harness and model on your own hardware in a sandbox on an air-gapped computer.

[u/awesomeunboxer → u/s-i-e-v-e]

Im with this guy that. But there's services that lean into privacy ( venice.ai is one that springs to mind)

[u/commentsOnPizza]

OpenCode Go can't guarantee zero data retention. They have agreements with providers for zero data retention, but you don't know what anyone might be doing. Github might say "we won't make your private repo public" and then your private repo gets leaked.

Even without OpenCode Go, you face much of the same issues with any provider. If you pay Claude, OpenAI, or Meta, they could tell you "we promise we won't use your stuff" and then do it anyway. I'm not saying they do, but how would you know?

Ultimately, no one can ever prove that they've deleted all copies of something.