The unusual part first: your prompts

This policy is shorter than most because we hold less than most. The content you send to a model — prompts, documents, completions — is encrypted at our edge to the one machine that serves your request. The relay that carries it holds no key. No log line or database column anywhere in the system stores prompt or completion content, and we check that automatically before every release. Content is never used to train or improve any model, never sold, and never shared. It exists in memory on the serving machine for the duration of your request, and then it is gone.

The precise mechanism, and its honest limit — the serving machine itself necessarily decrypts your request in order to run the model on it — is described on the technology page.

What we do collect

Account data

The email address you sign up or correspond with, an organization name if you give one, and a keyed hash of your API key (we cannot recover the key itself).

Usage metadata

Per request: an identifier, the model, token counts, timings, request state, error codes, and billing-verification hashes. Never content.

Payment data

Payments run through Stripe's hosted checkout. Your card details go to Stripe, not to us; we receive only the amount, a payment identifier, and its status. Stripe's own privacy policy governs what Stripe holds. We give Stripe the email address on your account so that Stripe can send you a receipt for each charge.

Website

The website sets no cookies, runs no analytics, and makes no third-party requests. The account pages use your API key only in your browser session and send it only to our API.

Who touches infrastructure

Our servers run on DigitalOcean (API edge and coordination, New York) and Hetzner (GPU machines, Germany). These hosts carry encrypted traffic and encrypted disks in the ordinary course of hosting; none of them receives readable prompt or completion content from us. Stripe processes payments. We use no advertising, analytics, or data brokers, and we do not sell personal information.

Retention and your rights

Content: not retained at all, as above. Account data and usage metadata: retained while your account exists and as required for accounting, then deleted. You may request a copy of the personal data we hold about you, correct it, or ask for your account and its data to be deleted, by writing to hello@tokn.supply from your account email. Financial records we are legally required to keep are kept for the required period only. The Service is not directed to children under 16.

Changes and contact

Material changes to this policy will be dated at the top of this page. Anything unclear, or any request about your data: hello@tokn.supply.