zkAPI keeps prompts awayy from payment servers, but AI providers can read submitted content and may connect sessions through repeated details.