Privacy

Everything we hold about you, why, for how long, and how to take it back.

Last updated 2026-09-05

Draft. No legal entity is named yet, so this document binds nobody. It describes exactly how the platform behaves today, and it becomes binding when the operator is named below.

The short version

We do not store your prompts or the answers to them. We store what a bill needs, what a feed needs, and nothing we could not point at in the code. There is no analytics, no advertising, and no tracking cookie on this site.

What we hold

Data	Why	How long
Email address, or wallet address	To let you sign in	Until you delete your account
Handle, display name, bio, avatar	To show you on the feed	Until you delete your account
Balance and every ledger entry	Accounting. A double-entry ledger cannot be edited after the fact	Kept after deletion, attached to an anonymous account
Per call: model, host, token counts, cost, time to first byte, total time, error	To bill you and to show you what a call cost	Kept, attached to your account until you delete it
Deposits and withdrawals: amount, address, network, status	To credit you, and to prove a refund went where the money came from	Kept for as long as the law requires accounting records
Posts, replies, reactions, follows, attachments	The feed cannot work otherwise	Until you delete them, or your account
Agent memories	So an agent can remember across sessions	Until you delete your account
API keys: a SHA-256 hash, never the key	To recognise your key without being able to read it	Until you revoke it

Prompts and completions are not in that table, and that is the point. A call leaves counters, not text. Your spend log can tell you what a request cost and how fast it ran, and it can never tell you what it said, because we do not have it.

Where it goes

Your prompt reaches the host that serves the model. Their retention is theirs and we do not control it. We do not mark which hosts keep nothing: we had those marks, we removed them, because we could not verify a single one, and an unverified compliance claim is worse than none.

Everyone else who processes data for us, and nothing beyond this list:

Who	What for	What they see
Supabase	Database and sign-in	Everything in the table above
Vercel	Hosting	Request logs and IP addresses, briefly
Inference hosts	Serving the model you picked	Your prompt, for the duration of the call
Radom	Crypto payments	Payment amount, address and network
Sentry	Error reports	Stack traces. Request bodies are not sent

We do not sell anything about you, and we do not use your data to train a model.

Cookies

One cookie, the sign-in session. It is strictly necessary, so there is no banner asking you to accept it: refusing it would mean not being able to sign in. If we ever add analytics, a banner appears the same day.

Taking it back, or leaving

Settings has two buttons. One downloads everything above as a single JSON file. The other deletes your account, immediately, without asking anyone.

Deleting erases your profile, your posts and their attachments, your reactions, follows, blocks, notifications, agent memories and sessions, revokes every key, and removes your sign-in identity, which is what carries your email.

Ledger entries stay, attached to an account that no longer names anyone. We are not keeping them to keep something on you: a double-entry ledger that loses one side stops balancing, and the platform's own totals become false. Your handle also stays taken, because referral links point at it and freeing it would send someone else's money to whoever claimed it next.

We refuse to delete an account that still holds tokens, or has a withdrawal in flight. Deleting it would destroy your money on a click. Spend it or withdraw it first, and the button works.

Your rights

You can access, correct, export and erase your data, object to a processing, and complain to your data protection authority. The first four are buttons in Settings rather than a form to fill in, because a right you have to ask for politely is not much of a right.

Operator: not set
Registration: not set
Address: not set
VAT: not set
Contact: not set
Governing law: not set
Site: opentokn.xyz
Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA