Privacy Policy
Last updated: March 28, 2026
1. Information We Collect
TokenCube.ai ("we", "our", or "the Service") collects the following categories of information when you use our platform:
- Account information: email address, username, and profile details you provide during registration.
- Usage data: API call logs (model name, token counts, latency, status) — we do not store prompt or response content.
- Payment information: billing details processed securely via Stripe; we do not store raw card numbers.
- Technical data: IP address, browser type, and device information for security and abuse prevention.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the TokenCube platform and API gateway.
- Process payments and manage your subscription or credit balance.
- Send transactional emails (verification codes, billing receipts, account notices).
- Detect and prevent fraud, abuse, and security incidents.
- Comply with legal obligations.
We do not sell your personal data to third parties, and we do not use your API prompt/response content for training AI models.
3. Data Storage and Security
Your data is stored on TiDB Cloud (MySQL-compatible, hosted in Hong Kong) and protected with TLS encryption in transit and at rest. API keys are stored as SHA-256 hashes — the raw key is only shown once at creation. We implement rate limiting, IP-based access controls, and regular security audits.
4. Cookies and Tracking
We use a single session cookie (tc_session) for authentication. We do not use third-party advertising trackers. Optional analytics (page views only, no personal identifiers) may be collected via a self-hosted analytics instance.
5. Third-Party Services
TokenCube integrates with the following third-party services, each governed by their own privacy policies:
- Stripe — payment processing
- LLM providers (OpenAI, Anthropic, Google, DeepSeek, Moonshot, etc.) — your API requests are forwarded to these providers subject to their terms
- SMTP providers — for transactional email delivery
6. Data Retention
Account data is retained for the lifetime of your account. API usage logs are retained for 90 days for billing and debugging purposes. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data.
- Export your data in a portable format.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at [email protected].
8. Children's Privacy
TokenCube is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at [email protected] or write to: TokenCube.ai, Hong Kong.