Privacy Policy

1. Data we collect

• Account data: your email address, name, company name and the information you send us when you request access or contact us.
• Billing data: top-up amounts, balances, invoices and transaction records. Card and bank details are handled by our payment processors; we do not receive full card numbers.
• Usage metadata for each API request: request ID, timestamps, API key ID, the model ID called and the model that served it, token counts, cost, latency, status and error type, IP address and user agent.
• Website analytics: aggregated page-view statistics collected without advertising cookies (Vercel Web Analytics and Cloudflare Web Analytics).

2. Prompt and response content

We do not store the content of your prompts or of model responses. Content is transmitted through our gateway to the model provider that serves the request and returned to you. Model providers process that content under their own terms and privacy policies, which may include temporary retention for abuse monitoring.

3. How we use data

• To provide the Service: authenticate API keys, route requests, enforce rate limits and spending caps.
• To bill you: reserve and settle charges, maintain balances, keep accounting records.
• To keep the Service secure: detect fraud, abuse and violations of our Acceptable Use Policy.
• To support you and communicate about your account, changes to the Service and these policies.
• To understand and improve the Service using aggregated statistics.
• To comply with legal obligations.

4. Legal bases

Where the GDPR or similar laws apply, we process personal data to perform our contract with you, for our legitimate interests in operating, securing and improving the Service, to comply with legal obligations, and with your consent where consent is required.

5. Who we share data with

We do not sell personal data. We share it only with service providers that help us run the Service, under contracts that restrict their use of it:

• AI model providers that process your requests, including Alibaba Cloud, DeepSeek and Google.
• Hosting and infrastructure: Vercel (application hosting), Neon (database), Cloudflare (DNS and website analytics).
• Payment processors that handle your payments.
• Professional advisers and authorities where required by law or to protect our rights.

6. International transfers

Our providers process data in several countries, including the United States, China and Singapore, which may not offer the same level of protection as your country. Where required, we rely on appropriate safeguards such as standard contractual clauses. Request content is processed in the country of the model provider that serves the request.

7. Retention

We keep account data while your account is active and for a reasonable period afterwards. Usage and billing records are kept for as long as needed for accounting, tax, dispute and audit purposes, generally up to seven years. Aggregated statistics that do not identify you may be kept longer.

8. Cookies

We use a small number of strictly necessary cookies: tokenapi_lang remembers the language you chose, and the admin area uses a session cookie for staff sign-in. Our website analytics do not use cookies. We do not use advertising or cross-site tracking cookies.

9. Security

We protect data with encryption in transit, hashed API keys, encrypted upstream credentials, access controls and logging. No system is perfectly secure; please keep your API keys safe and report suspected incidents to hello@tokenapi.biz.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email hello@tokenapi.biz. You may also complain to your data protection authority.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their personal data.

12. Changes and contact

We may update this policy and will post the new version with its effective date. Contact: TokenAPI, hello@tokenapi.biz.