Exodia operates a browser-first toolset. We do not collect or send your private keys. Metadata (token artifacts you compile and save) is stored only in your browser localStorage by default. You can export/import encrypted backups. If you choose to submit verification or audit proofs to external services, those submissions are handled by your browser and require your explicit action.
Explorer verification uses third-party explorer APIs (Etherscan, Polygonscan, etc.). Audit submissions to external endpoints are posted by your browser to the endpoint you provide.