Privacy Policy

• Account data — email, name (if provided), authentication identifiers, and password hash (we never store your plaintext password).
• Purchase data — orders, packs owned, and payment references. Card details are handled by Stripe; we never see or store your full card number.
• Usage data — the prompts and responses in your workspace sessions, token counts, model called, timestamps, and latency.
• Technical data — IP address, approximate country, and user-agent, used for security and fraud prevention.

• To provide the service — route your prompts and meter token usage.
• To process payments and issue refunds.
• To secure accounts and prevent abuse and fraud.
• To send transactional email (receipts, sign-in links, account notices).
• To send product or marketing email only if you opt in — you can unsubscribe at any time.

To answer your prompt, we must transmit it (and any context you provide) to the third-party provider behind the pack you chose — for example DeepSeek, Qwen, Kimi, GLM, or MiniMax. Those providers process your prompt under their own terms and privacy policies. We list the providers on our Transparency page.

We do not train any model on your prompts or responses, and we do not sell your personal data.

We rely on a small set of vendors to run the service:

• Stripe — payment processing.
• Neon — database hosting.
• Vercel — application hosting.
• Resend — transactional email delivery.
• Cloudflare — bot protection on sign-up.

Each processes data only to provide its service to us, under its own security and privacy commitments.

We keep account and order records for as long as your account is active and as required for tax and legal purposes. Workspace conversation history is stored encrypted at rest and is accessible only to you. You can delete individual sessions at any time.

Subject to applicable law, you can access, correct, or delete your personal data, withdraw marketing consent, and request a copy of your data. To exercise any of these, email privacy@token-wallet.ai. Full account deletion with a grace period is being rolled out; until then we will action deletion requests manually.

Because our providers and infrastructure operate in multiple countries, your data may be processed outside your home country, including in Singapore, the United States, and (for Chinese AI providers) mainland China. We apply appropriate safeguards consistent with the PDPA.

We use strictly necessary cookies for sign-in and security. We do not use advertising cookies. A dedicated cookie notice ships with EU-facing features.

Privacy questions or requests: privacy@token-wallet.ai.