Privacy Policy

Last Updated: October 2, 2026

1. Introduction

At Tokin ("we," "our," or "us"), your privacy and security are paramount. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our dashboard, or make requests through our API gateway. Please read this Privacy Policy carefully.

2. Information We Collect

We collect information that is necessary to operate our service securely and efficiently:

Account Information: When you register (e.g., via GitHub or email), we collect your username, email address, and authentication tokens.
Financial Information: For cryptocurrency payments, we collect necessary transaction metadata (e.g., wallet addresses, transaction hashes) to credit your account. We do not store private keys.
API Telemetry & Logs: We collect metadata related to your API usage, such as request volume, timestamps, IP addresses, upstream routing choices, and latency metrics to enforce rate limits and bill correctly.
Prompt & Completion Data: As a proxy gateway, we receive your prompts to route them to upstream providers (like OpenAI, Anthropic, or OpenRouter). We do not train models on your data, but prompts may be transiently cached or logged for security and abuse-prevention purposes.

3. How We Use Your Information

We use the collected information for the following purposes:

To provision, maintain, and secure your account and API access.
To process payments, verify crypto transactions, and manage prepaid credit balances.
To monitor platform stability, load balance traffic, and detect fraudulent or abusive activity (e.g., DDoS attacks, rate limit evasion).
To display analytics, usage tracking, and spend metrics back to you in your dashboard.
To communicate with you regarding service updates, policy changes, or account issues.

4. Disclosure to Third Parties

Tokin operates as a routing and gateway service. To fulfill your API requests, we must transmit your prompt and configuration data to the specific upstream AI provider you select (e.g., OpenAI, Anthropic, Google).

By using our service, you acknowledge that your data will be subject to the privacy policies and data handling practices of the upstream provider processing the request. We do not sell your personal data or account information to advertising networks or third-party marketers.

5. Data Retention and Security

We employ administrative, technical, and physical security measures to help protect your personal information. Your API keys are hashed and salted in our database. While we have taken reasonable steps to secure the data you provide to us, please be aware that no security measures are perfect or impenetrable.

We retain usage logs and transaction data for as long as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request the deletion of your account at any time.

6. User Rights & GDPR

Depending on your location, you may have rights under regional privacy laws (like the GDPR or CCPA) to request access to, correction of, or deletion of your personal data. You may also have the right to object to processing or request data portability. To exercise these rights, please contact us using the information provided below.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

8. Contact Us

If you have questions or comments about this Privacy Policy, or if you wish to exercise your data rights, please contact our Data Protection Officer at privacy@tokin.ai.