Privacy Policy

Last updated: 2026-09-09

1. What we collect

• Account data: your email address; when you sign in with a third-party account, its account ID, email, display name and avatar; when you sign in with a crypto wallet, the wallet address.
• Security log: time, IP address and browser identifier of sign-ins, sign-outs and API key creation, used to detect account takeover.
• Usage records: for every call, the model, platform, token counts, billed amount, latency and status. We do not store your prompts or the model's responses; they pass through the gateway in transit only.
• Financial records: deposit addresses and transaction hashes, wallet ledger, orders, withdrawal requests and payout addresses.
• Seller credentials: custodied API keys are stored AES-256 encrypted with a master key kept outside the database, and decrypted only to forward requests and run health checks.

2. How we use it

To run the service (routing, billing, settlement, withdrawals), prevent fraud and account takeover, resolve disputes, meet legal obligations, and send you notices tied to your account (withdrawal results, credential failures, outage refunds, low balance). We do not run ads and do not sell data.

3. Who sees it

• Upstream model vendors: the content of your requests is forwarded to the vendor of the model you call (OpenAI, Anthropic, DeepSeek, …) under their privacy policy.
• Email provider: sees your address when we send sign-in links and notices.
• Custody / on-chain services: deposit and payout addresses and amounts pass through our custody provider and are public on the blockchain.
• Law enforcement, where required by law or to protect the Platform and its users.

4. Cookies

One session cookie (HttpOnly, 30 days) keeps you signed in, and browser local storage remembers your language. No third-party tracking cookies.

5. Retention

Account data is kept while your account exists. Financial and usage records are kept at least 5 years for reconciliation and legal requirements. Security logs are kept 180 days. Custodied credentials are deleted within 30 days after a listing is removed.

6. Your rights

You can export your ledger and call history as CSV from the Wallet page. To access, correct or delete your account data, email support@tokenonline.ai; we respond within 30 days, except for records we must keep by law.

7. Security

All traffic is HTTPS; credentials are encrypted at rest; withdrawals are protected by email confirmation, a cooling period for new addresses and manual review. No system is perfectly secure — protect the email, third-party accounts and wallets you sign in with.

8. Changes

When this policy changes, the date at the top is updated; material changes are announced on the site.

9. Contact

support@tokenonline.ai