Legal

Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains what information TokenRoute collects when you use our AI API gateway at tokenroute.app, how we use it, and the choices you have. It applies together with our Terms of Service.

1. Information we collect

  • Account data: your name (optional), email address, and a securely hashed password.
  • API & usage data: API keys you create, and metadata about your requests — the model used, token counts, cost, timestamps, status, and related IP address — used for billing, analytics, and security.
  • Request content: the prompts and inputs you send are transmitted to the third-party model provider you select in order to generate a response.
  • Payment data: metadata about your crypto top-ups, such as amount, currency, network, transaction identifiers, and status. We do not take custody of your wallet keys.

2. How we use information

  • to provide, operate, and maintain the Service and route your API requests;
  • to meter usage, calculate charges, and maintain your credit balance;
  • to secure the Service and prevent fraud and abuse;
  • to provide customer support and respond to your requests; and
  • to comply with legal obligations.

3. Your prompts and model providers

To fulfil an API request, the content of that request is sent to the third-party model provider you choose (for example, via our upstream routing partner). Those providers process the request under their own terms and privacy policies. TokenRoute does not use your prompts or outputs to train models. We retain request metadata (not necessarily full content) for billing, analytics, and abuse prevention.

4. How we share information

We share information only as needed to run the Service:

  • Model providers / routing partners — to generate responses to your requests;
  • Payment processors — to process and confirm your cryptocurrency top-ups;
  • Infrastructure providers — hosting and database services that operate the Service on our behalf; and
  • Legal / safety — where required by law or to protect our rights, users, or the public.

We do not sell your personal information.

5. Cookies & sessions

We use strictly necessary cookies and tokens to keep you signed in and to operate the Service (for example, authentication session tokens). We do not use third-party advertising trackers.

6. Security

We protect data in transit with HTTPS, store passwords using one-way hashing, and encrypt sensitive secrets at rest. No method of transmission or storage is completely secure, but we take reasonable measures to safeguard your information.

7. Data retention

We retain account and usage records for as long as your account is active and as needed to provide the Service, resolve disputes, meet legal and accounting obligations, and prevent abuse. You may request deletion of your account as described below.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.

9. International transfers & children

Your information may be processed in countries other than your own, including where our providers operate. The Service is not directed to children under 18, and we do not knowingly collect their personal information.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes are indicated by the "Last updated" date above; your continued use of the Service after an update constitutes acceptance.

11. Contact

For privacy questions or requests, contact us at comingtop01@gmail.com or via our contact page.