Privacy Policy
Last updated: 2026-07-10
1. Controller & contact
TokenomiCo (tokenomico.com) is the controller of personal data processed in the service. Privacy contact: contact@tokenomico.com.
2. Data we process
Account: name/company, e-mail, password hash (scrypt — never the password), language, encrypted 2FA secret. BYOK keys: encrypted with AES-256-GCM; decrypted only in memory, at forwarding time. Usage metrics: token counts, provider, model, timestamps — the basis of your invoice. Payments: processed by Stripe; we never see or store card data — we keep only amount, date and reference. Prompts and responses: processed in transit to compress and forward; not stored — we keep only numeric token metrics. Technical logs: IP and request metadata, short-lived, for security and diagnostics.
3. Purposes & legal bases
Contract performance (providing the service, measuring savings, billing — GDPR art. 6(1)(b); LGPD art. 7(V)); legitimate interests (security, anti-fraud, rate limiting — GDPR art. 6(1)(f); LGPD art. 7(IX)); legal obligations (tax records — GDPR art. 6(1)(c); LGPD art. 7(II)). We do not sell personal data and we run no advertising.
4. Sharing
Your prompts are sent to the LLM provider you chose (Anthropic, OpenAI, etc.), under that provider's terms — that is the essence of the service. Payments: Stripe. E-mail/DNS infrastructure: Hostinger. No other sharing; no selling; no data brokers.
5. International transfers
LLM providers and Stripe may process data outside your country (e.g., the US). Such transfers occur to perform the contract you requested (GDPR art. 49(1)(b); LGPD art. 33(IX)) and, where applicable, under the providers' own contractual safeguards (e.g., SCCs).
6. Retention
Account data: for as long as the account exists. Usage metrics and payment records: as needed for billing, audit and tax obligations. Technical logs: days, not months. After account deletion, data is erased or anonymized unless retention is legally required.
7. Security
TLS on all traffic; BYOK keys and 2FA secrets encrypted (AES-256-GCM); passwords hashed with scrypt; httpOnly sessions stored as hashes; 2FA available; firewall; least privilege.
8. Your rights
EU/EEA (GDPR, arts. 15–22): access, rectification, erasure, restriction, portability and objection. You may lodge a complaint with your local supervisory authority.
Brazil (LGPD, art. 18): confirmation, access, correction, anonymization, portability, deletion, information on sharing, and consent withdrawal. Complaints: ANPD.
United States (CCPA/CPRA and similar state laws): rights to know, correct and delete. We do not sell or "share" personal information within the meaning of the CPRA, so no opt-out is needed — we honor "Do Not Sell or Share" by default.
To exercise any right: contact@tokenomico.com. We respond within statutory deadlines (30 days GDPR; 15 days LGPD; 45 days CCPA).
9. Cookies
| Name | Type | Purpose | Duration |
|---|---|---|---|
toke_sess | Essential (cookie) | Keep your dashboard session authenticated | 7 days |
toke_lang | Preference (cookie) | Remember the language you picked in the selector | 1 year |
toke_ck, toke_2fa_skip, toke_consent | Preference (localStorage) | Remember dismissed notices and your consent choice; never leaves your browser | until you clear it |
_gcl_*, _ga* (Google) | Ads measurement (third party) — only with your consent | Measure conversions of our Google Ads campaigns (Google tag with Consent Mode v2; without acceptance, no cookie in this group is ever set) | up to 90 days / 2 years (Google defaults) |
Apart from Google ads measurement — which only happens if you accept in the consent banner (and can be declined with zero impact on the product) — we use no analytics, advertising or tracking cookies, and page assets (fonts, first-party scripts) are served from our own domain. Strictly necessary cookies and user-triggered preferences are exempt from prior consent under GDPR/ePrivacy, LGPD and US state privacy laws.
10. Children
The service is B2B/professional and not directed to anyone under 18.
11. Changes
Material changes to this policy will be announced by e-mail. The current version always lives at tokenomico.com/privacy.