Privacy Policy

When you create or use a Tokfai account, we may collect account information such as your email address, name, avatar, OAuth provider, and authentication identifiers provided by services such as Google OAuth or GitHub OAuth.

We also collect service-related records, including API usage logs, request metadata needed to operate the platform, billing information, credit balance history, and transaction records associated with purchases or account activity.

We use account information to provide login, authentication, account management, customer support, and secure access to the Tokfai API gateway.

We use usage logs, billing information, and credit records to deliver the service, calculate API usage, show dashboards, prevent abuse, improve reliability, perform security and fraud checks, and process payments or invoices.

Tokfai relies on trusted third-party services to operate the product. These may include Supabase for authentication and database services, Stripe for payment processing and billing, Google OAuth for Google sign-in, GitHub OAuth for GitHub sign-in, and model service providers that process API requests on behalf of users.

These providers may process data according to their own privacy policies and contractual obligations. We only share information with these providers when needed to authenticate users, provide the service, process payments, route model requests, maintain security, or meet legal obligations.

We do not sell user data. We do not share personal information with advertisers or data brokers.

We may disclose information if required by law, to protect the security and integrity of Tokfai, to investigate abuse or fraud, or in connection with a business transfer such as a merger, acquisition, or sale of assets.

We retain account, billing, credit, and usage records for as long as needed to provide Tokfai, maintain accurate financial and system records, resolve disputes, enforce our terms, and comply with legal requirements.

We use reasonable administrative, technical, and organizational safeguards to protect user information. No internet service can be guaranteed to be completely secure, but we work to reduce risk and limit access to sensitive information.

You may contact us to request account deletion, data deletion, or help with privacy-related questions. Some records may need to be retained when required for security, fraud prevention, billing, tax, accounting, or legal compliance.

For privacy requests, contact us at junpengpanchina@gmail.com.