What we collect
When you sign in we collect the email address and (optionally) display name from your auth provider. Buyers add a Stripe payment method through Stripe-hosted checkout — we never see or store card details directly. Sellers submit provider credentials (e.g. OpenAI, Anthropic, Grok, Gemini keys) which are encrypted at rest with envelope encryption before being persisted.
We also retain anonymized request metadata — model id, token counts, latency, timestamps — so buyers and sellers can reconcile usage against the ledger. We do not retain message contents passed through the proxy.
How we use it
Data is used exclusively to operate the marketplace: routing requests, deducting token allocations, crediting seller earnings, settling Stripe charges, and detecting abuse. We do not sell your data, we do not train models on it, and we do not share it with third-party analytics aggregators beyond what is required to run the product (Stripe for payments, Clerk for authentication, our cloud provider for hosting).
Seller credentials
Seller provider keys are the most sensitive piece of data in the platform. They are encrypted with a per-tenant data key, which is itself wrapped by a master KMS key. Plaintext credentials exist only ephemerally inside the request proxy and are never logged.
Buyers never see seller credentials. Buyers receive a TokenlyPro-issued key (tk_live_…) that authenticates against the proxy, not the upstream provider.
Cookies & tracking
TokenlyPro uses functional cookies for authentication and session continuity. We do not run third-party advertising trackers, and we do not use cross-site identifiers. Aggregate, anonymized analytics may be collected to improve the product.
Data retention
Account data is retained while your account is active and for up to 12 months after deletion to comply with tax and payment-reconciliation obligations. Encrypted seller credentials are deleted immediately when a listing is removed. You can request a full data export or deletion at any time by emailing us.
Your rights
Depending on where you live, you may have rights to access, correct, port, or delete the personal data we hold. Email hello@tokenlypro.com and we'll respond within 30 days.