Your prompts get sent in plaintext to their central server. The same as any other LLM clould provider. The only difference is that they pinky-promise not to log it.

It's up to you if you trust it or noy.