Privacy Policy

1. Who we are

Tokonomics (“we”, “us”, “our”) is an AI cost metering platform operated at tokonomics.ca. Our contact email is hello@tokonomics.ca.

2. What data we collect

Account data: When you register, we collect your name, email address, and password (hashed with bcrypt). If you sign in with Google, we receive your name, email, and Google profile ID.

Usage data: For every LLM API call routed through Tokonomics, we record:

• Token counts (input and output)
• Cost in USD (calculated from public pricing)
• Model name and provider
• Latency in milliseconds
• Custom tags you attach via the X-Metering-Tags header
• Timestamp

We do not store: prompt content, system prompts, messages, or any personal data from your end users.

Provider keys: If you store a provider API key in the dashboard, it is encrypted with AES-256-CBC before being written to the database. The plaintext key is never logged.

3. How we use your data

• To provide the Tokonomics dashboard and analytics features
• To send budget alert emails when your configured thresholds are reached
• To process payments via Stripe
• To improve the product — aggregated, anonymized usage patterns only

We do not sell your data. We do not use your data for advertising.

4. Data sharing

We share data with the following third-party services strictly to operate the product:

• Stripe — payment processing. Governed by Stripe’s Privacy Policy.
• Zoho Mail — transactional email (budget alerts, account emails). Governed by Zoho Mail’s Privacy Policy.
• Google — OAuth login only, if you choose to use it.

We do not share your data with any other third parties.

5. Data retention

• Free plan: Usage events are retained for 30 days
• Pro plan: Usage events are retained for 90 days
• Account data: Retained until you delete your account

You can request deletion of your account and all associated data at any time by emailing hello@tokonomics.ca.

6. Security

We use industry-standard security practices:

• All traffic is encrypted in transit via HTTPS/TLS
• Provider API keys are encrypted at rest with AES-256-CBC
• Passwords are hashed with bcrypt — never stored in plaintext
• Tokonomics API keys are stored as SHA-256 hashes — the plaintext is shown once and never stored

7. Your rights

You have the right to access, correct, or delete your personal data at any time. To exercise any of these rights, email us at hello@tokonomics.ca and we will respond within 5 business days.

8. Cookies

We use a single session cookie (tokonomics_session) to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. The “last updated” date at the top of this page will always reflect the most recent version.

10. Contact

Questions about this privacy policy? Email us at hello@tokonomics.ca.