Privacy Policy

1. Overview

This Privacy Policy explains what information Tokx (the "Service") collects, how it is used and shared, and the choices you have. It applies to the Tokx website, its associated servers, and the usage agent software distributed by Tokx.

By using the Service, you agree to the practices described in this policy. This policy should be read together with the Terms of Service.

2. Information We Collect

Account information

When you sign in with GitHub, we receive information from your GitHub account, limited to what GitHub provides under the read:user,user:email scope: your GitHub name, email address (if public or made available to us), avatar, and a unique GitHub identifier. You may also provide a country code for your profile.

Usage and spend data

When the agent runs on your machine, it uploads aggregated daily usage reports to the Service. These reports contain the provider, model, token counts (input, cached, output, and reasoning), estimated cost, cache savings, and number of sessions per day. The agent does not upload the content of your conversations or the underlying session files; it reads them locally and uploads only aggregates.

Technical and session data

When you use the Service, our servers automatically record technical information such as your IP address, browser type and user agent, device information, the pages you visit, and the time and date of your requests. This information is used to operate and secure the Service and to diagnose issues.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate you and keep your account secure;
• Calculate and display your token spend, usage history, and per-provider breakdowns;
• Produce aggregated, anonymized statistics such as per-country total spend on the world map;
• Prevent abuse, fraud, and unauthorized access;
• Communicate with you about the Service when necessary.

We do not use your usage data to train AI models, and we do not sell your personal information.

4. How We Share Information

We do not sell or rent your personal information. We share information only in the following circumstances:

• Publicly: your GitHub name and avatar, total reported spend, and country-level spend are visible to other users and visitors on public pages of the Service, including the world map;
• With service providers: we use third-party infrastructure providers (such as hosting and database providers) to operate the Service. These providers process data on our behalf under contractual obligations of confidentiality;
• Legal compliance: we may disclose information when required by law, legal process, or a valid government request, or when necessary to protect the rights, property, or safety of Tokx, its users, or the public;
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy continuing to apply.

5. Cookies and Local Storage

We use a session cookie to keep you signed in. The cookie is required for the Service to function and contains a randomly generated session identifier, not your personal data. We do not use third-party advertising or tracking cookies.

6. Data Retention

We retain your account information for as long as your account is active, and your usage and spend data for as long as needed to provide the Service. When you delete your account, we delete your account, session, spend, and usage data from the Service. Aggregate, de-identified statistics (such as per-country totals) may be retained after deletion because they can no longer be linked to you. We may also retain data where required by law or for legitimate security purposes.

7. Security

We take reasonable technical and organizational measures to protect your information, including hashing ingest keys and passwords before storage, using HTTPS for data in transit, and restricting access to production data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and ingest key confidential.

8. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information, such as your country code;
• Delete your account and the associated data;
• Export your usage data;
• Object to or restrict certain processing where applicable by law.

You can exercise most of these rights from your account settings. For anything else, contact us using the details in section 11. We will respond within the timeframe required by applicable law.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and notify you through the Service where reasonable. Material changes will not apply retroactively without your consent. Your continued use of the Service after the updated policy takes effect constitutes acceptance of the changes.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at [email protected].