Who This Policy Covers
This Policy covers visitors to the TokenWay website; people who submit inquiries; representatives of customers and prospective customers; Authorized Users; and information handled in connection with Token API, Token Factory, and authorized support.
Our Role
TokenWay acts as a controller where it determines the purposes and means of processing for website, account, billing, security, and operational data. TokenWay acts as a processor or service provider when processing customer-directed personal data on documented customer instructions. The applicable Enterprise Agreement records the roles and instructions that apply.
Information We Collect
You may provide contact and organization data, inquiry and contract records, and information needed to establish and administer the commercial relationship. Customers and Authorized Users may provide user identifiers and account details for authentication and service administration.
TokenWay receives device and network data, such as IP address, browser or device information, timestamps, and security events, when people use the website or enterprise services. TokenWay also generates non-content service metadata, such as request timing, model identifier, token counts, status, and usage records, for operating the services.
Support content is collected only when a customer or user voluntarily submits it through an authorized support channel. These categories do not include the text or substance of Inference Content, which is handled as described below.
Token API Inference Content
Prompts, messages, attachments, other inputs, and model outputs processed through Token API are Inference Content. Inference Content is processed transiently to perform the request, is not logged or persisted by TokenWay, and has a retention period of 0 days.
TokenWay does not use Inference Content to train, fine-tune, distill, evaluate, or improve models. TokenWay personnel do not review Inference Content. Content that a customer voluntarily submits through an authorized support channel is handled separately as support content.
How We Use Information
TokenWay uses personal data and other information that is not Inference Content to respond to inquiries; conduct onboarding; authenticate and administer users; meter usage; protect security; provide support; manage billing; operate and improve service reliability; and meet applicable legal obligations.
Inference Content is used solely to perform the authorized Token API request and is not used to train, fine-tune, distill, evaluate, or improve models.
Service Providers and Disclosures
TokenWay may engage service providers in the infrastructure, security, authentication, communications, billing, and professional-services categories. They are permitted to process information only for the relevant service purpose and are subject to appropriate contractual controls.
TokenWay may disclose information when required by law or legal process, to protect rights, safety, and service security, or in connection with a corporate transaction, subject to applicable legal and contractual requirements.
International Transfers
Website, inquiry, account, billing, security, and support data may be processed where TokenWay or its service providers operate, subject to lawful safeguards. Customer-directed enterprise-service processing regions follow the applicable Enterprise Agreement or customer configuration. Where a cross-border transfer requires safeguards, TokenWay uses lawful transfer mechanisms appropriate to the transfer and applicable requirements.
Retention
Inference Content has a retention period of 0 days. Non-content service metadata may be retained for up to 180 days for metering, billing, reliability, security, and compliance. Website inquiries, account records, contracts, invoices, support records, and legally required records are retained only for the applicable business or legal purpose.
Security
TokenWay uses reasonable technical and organizational measures designed to protect information against unauthorized access, use, alteration, and disclosure. No method of transmission, processing, or storage can be guaranteed to be completely secure.
Your Rights and Choices
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal data, or to withdraw consent where processing relies on consent. TokenWay may verify your identity and request, and rights may be subject to applicable exceptions or limitations. Submit privacy questions or rights requests to privacy@tokenway.ai.
Marketing and Cookies
The website may use essential cookies or similar storage needed for security, preferences, and core functionality. Analytics or marketing technologies are used only as applicable. Where required, you may manage preferences through available controls, and you may opt out of marketing communications using the method provided in the communication.
Children
TokenWay's website and enterprise services are not directed to children. If you believe a child has provided personal data in connection with them, contact privacy@tokenway.ai.
Changes and Contact
TokenWay may revise this Policy as its practices, services, or applicable requirements change. The effective date identifies the current published version.
For privacy questions or rights requests, contact privacy@tokenway.ai. Send legal notices to legal@tokenway.ai.