Privacy Policy

Effective date: May 18, 2026  |  Last updated: May 18, 2026

Token998 ("we", "us", or "our") operates token998.com and the API gateway at token.token998.com. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

• Account data: Email address and password hash when you register.
• API usage logs: Request timestamps, model names, token counts, and HTTP status codes. We do not store the content of your prompts or completions.
• Payment records: Transaction IDs and amounts for top-up history. No card numbers are stored; USDT payments are on-chain and self-evidencing.
• Technical data: IP address and User-Agent for abuse prevention and rate limiting.

2. What We Do Not Collect

• Prompt or response content sent through the API.
• Browsing history or third-party tracking cookies.
• Biometric or sensitive personal data of any kind.

3. How We Use Your Data

• To provide and maintain the API service.
• To calculate billing and display usage statistics in your dashboard.
• To detect fraud, abuse, and API key misuse.
• To send transactional emails (registration confirmation, low-balance alerts). No marketing emails without explicit opt-in.

4. Data Sharing

We do not sell, rent, or trade your personal data. We may share limited data with:

• Upstream AI providers (e.g. OpenAI, Anthropic): only the API request payload required to fulfill your call. No account data is shared.
• Payment processors: transaction amounts and IDs only, as required for USDT settlement.
• Law enforcement: only when compelled by a valid legal order under applicable Chinese law.

5. Data Retention

API usage logs are retained for 90 days, then automatically deleted. Account data is kept for the lifetime of your account and deleted within 30 days of account closure upon request.

6. Security

All traffic is encrypted via TLS 1.2+. API keys are stored as hashed values. We conduct regular security reviews and publish uptime and incident reports at our status page.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 15 business days.

8. Cookies

We use only a single session cookie for login state. No third-party analytics or advertising cookies are used.

9. Children

Token998 is not directed at children under 16. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy. Material changes will be announced on our status page and via email to registered users at least 7 days before taking effect.

11. Contact

Questions or data requests: support@token998.com