That's an excellent question! It's currently running on Google Cloud Run, which to my knowledge, doesn't offer any encrypted memory options. So, as of now, there isn't any architecture in place to protect the plaintext.
It's definitely something we've thought about. And something we may pursue.
It's definitely something we've thought about. And something we may pursue.