Privacy Policy
1. Introduction
TokenGate, operated by Salvador Aceves ("Company", "we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
Account Information
When you register for an account, we collect your email address and organization name for authentication and account management purposes.
API Keys
You may store third-party API keys (such as OpenAI, Gemini, or Claude keys) in our service. These keys are encrypted using envelope encryption and are only decrypted when making requests on your behalf.
Usage Data
We collect token usage metrics to provide quota management and billing features. This includes the number of tokens used per request, model type, and timestamps. We do not store the content of your prompts or responses.
Technical Data
We automatically collect certain technical information including IP addresses, browser type, and access times for security and analytics purposes.
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services
- Process transactions and manage your account
- Track and enforce usage quotas
- Send service-related communications
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Envelope encryption for stored API keys
- Secure HTTPS connections for all data transmission
- Regular security assessments and updates
- Access controls and authentication mechanisms
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Usage data is retained for billing and analytics purposes. You may request deletion of your account and associated data at any time.
6. Data Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
- With your consent
- To comply with legal obligations
- To protect our rights and prevent fraud
- With service providers who assist in operating our service (under confidentiality agreements)
7. Third-Party Services
Our service integrates with third-party LLM providers (OpenAI, Google, Anthropic, Hugging Face, and OpenRouter). When you use these integrations, your requests are processed according to those providers' privacy policies. We recommend reviewing their policies to understand how they handle your data.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability
To exercise these rights, please contact us through our support page.
9. Cookies
We use essential cookies for authentication and session management. These cookies are necessary for the service to function and cannot be disabled.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
11. Children's Privacy
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us through our support page.