Privacy Policy

Last updated: June 5, 2026

The short version: We store billing metadata (token counts, costs, model names, your custom tags) to power your analytics dashboard. We never store your prompt content or end-user messages. Your provider API keys are encrypted with AES-256 and never exposed.

1. Who we are

Tokonomics ("we", "us", "our") is an AI cost metering platform operated at tokonomics.ca. Our contact email is hello@tokonomics.ca.

2. What data we collect

Account data: When you register, we collect your name, email address, and password (hashed with bcrypt). If you sign in with Google, we receive your name, email, and Google profile ID.

Usage data: For every LLM API call routed through Tokonomics, we record:

Token counts (input and output)
Cost in USD (calculated from public pricing)
Model name and provider
Latency in milliseconds
Custom tags you attach via the X-Metering-Tags header
Timestamp

We do not store: prompt content, system prompts, messages, or any personal data from your end users.

Provider keys: If you store a provider API key in the dashboard, it is encrypted with AES-256-CBC before being written to the database. The plaintext key is never logged.

Waitlist: If you join the waitlist, we store your email, company name, and LLM providers you indicated.

3. How we use your data

To provide the Tokonomics dashboard and analytics features
To send budget alert emails when your configured thresholds are reached
To process payments via Stripe
To contact waitlist users when the Pro plan becomes available
To improve the product — aggregated, anonymized usage patterns only

We do not sell your data. We do not use your data for advertising.

4. Data sharing

We share data with the following third-party services strictly to operate the product:

Stripe — payment processing. Governed by Stripe's Privacy Policy.
Zoho Mail — transactional email (budget alerts, account emails). Governed by Zoho Mail's Privacy Policy.
Google — OAuth login only, if you choose to use it.

We do not share your data with any other third parties.

5. Data retention

Free plan: Usage events are retained for 30 days
Pro plan: Usage events are retained for 90 days
Account data: Retained until you delete your account

You can request deletion of your account and all associated data at any time by emailing hello@tokonomics.ca.

6. Security

We use industry-standard security practices:

All traffic is encrypted in transit via HTTPS/TLS
Provider API keys are encrypted at rest with AES-256-CBC
Passwords are hashed with bcrypt — never stored in plaintext
Tokonomics API keys are stored as SHA-256 hashes — the plaintext is shown once and never stored

7. Your rights

You have the right to access, correct, or delete your personal data at any time. To exercise any of these rights, email us at hello@tokonomics.ca and we will respond within 5 business days.

8. Cookies

We use a single session cookie (tokonomics_session) to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. The "last updated" date at the top of this page will always reflect the most recent version.

10. Contact

Questions about this privacy policy? Email us at hello@tokonomics.ca.