The AI panel calls the provider directly from your browser. Your key is held in memory for this session only — it is never stored, logged, or sent anywhere except the provider.