Privacy Policy
Last updated: 11 August 2026
This policy explains what personal data TokenRoc collects, why we collect it, who we share it with, and what control you have over it. TokenRoc is operated by Shenzhen Ruike Fulai Technology Co., Ltd. (深圳市瑞科福来科技有限公司), which is the data controller for the purposes of this policy.
01What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Email address, password hash, account identifier, registration date | To create and secure your account |
| Usage data | Timestamps, model requested, token counts, response status, cost per request | To meter billing and provide usage reporting |
| Technical data | IP address, browser type, device and operating system | Security, fraud prevention, abuse investigation |
| Payment data | Transaction amount, currency, timestamp, payment method type, last four digits of a card | To process payments and keep financial records |
| Support data | Messages you send us | To answer your enquiries |
We never receive your full card number. Card details are entered directly with our payment provider and are never transmitted to or stored on our servers.
02Your API request content
The prompts you send and the outputs you receive are transmitted through our gateway to the upstream model provider you selected.
- We do not use your prompts or outputs to train any model.
- Request and response content is held only transiently, for as long as needed to complete and bill the request.
- We log request metadata — model, token counts, time, status — because billing requires it. Metadata is separate from content.
- Content may be retained temporarily where required to investigate a specific security incident or suspected abuse, or where the law requires it.
Once your request reaches an upstream provider, that provider's own privacy policy applies to its handling of the content. Their retention and training practices are outside our control, so review the policy of any provider whose models you use.
03Who we share data with
- Upstream AI providers — your prompt content, to fulfil the request you made.
- Payment providers — the data needed to take payment and to meet their anti-fraud and regulatory checks.
- Infrastructure providers — hosting, storage and content delivery, under contract.
- Authorities — where we are legally required to disclose, or to protect the rights and safety of people.
We do not sell your personal data, and we do not share it with advertisers.
04International transfers
TokenRoc serves users worldwide, and our infrastructure and providers operate across multiple countries. Your data may therefore be transferred to and processed in countries other than your own, which may have different data protection standards. Where required by law, we put appropriate safeguards in place for such transfers.
05How long we keep it
- Account data — for as long as your account is open, then deleted or anonymised within a reasonable period after closure.
- Usage and billing records — retained for the period required by applicable accounting and tax law.
- Security logs — retained for a limited period, then deleted.
06Security
We use encryption in transit, hashed password storage, and access controls restricting internal access to those who need it. API keys are shown once at creation and stored in hashed form.
No system is perfectly secure. Keep your API keys private, rotate them if you suspect exposure, and do not embed them in client-side code or public repositories.
07Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Request deletion of your data
- Object to or restrict certain processing
- Receive your data in a portable format
- Withdraw consent where processing is based on consent
- Complain to your local data protection authority
To exercise any of these, contact us at the address in Section 10. We will respond within the period required by applicable law. We may need to verify your identity first.
08Cookies
We use cookies that are strictly necessary to operate the site and keep you signed in. Where we use analytics cookies to understand how the site is used, we will seek your consent where the law requires it. You can control cookies through your browser settings, though disabling essential cookies will prevent sign-in from working.
09Children
TokenRoc is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10Changes and contact
We may update this policy. Material changes will be posted here with a revised date, and notified by email where practical.
Privacy questions or requests: info@tokenroc.com