Last updated: 2026.09.18
AI Champion Limited ("we", "our", "us") is committed to protecting personal data and handling it responsibly. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit www.tokenmoo.com and related pages (the "Website"), create or use a TokenMoo account, call models through the TokenMoo AI model API aggregation service (the "Service"), or otherwise use our services, and it describes your choices and rights. Please read it carefully before using the Service.
This Privacy Policy does not apply to third-party websites, applications, APIs, or platforms we do not control, including the third-party model providers you reach through the Service. Those third parties are governed by their own privacy notices and terms.
We process personal data according to context: we determine how and why personal data is processed for our own operational purposes such as account administration, billing, security, abuse prevention, and legal compliance. Where you or your organization submits data through the Service, that organization is generally responsible for providing required notices to, and obtaining required authorizations from, its end users.
2.1 Account and contact information: name, company name, email address, account credentials, username, account identifiers, and communication preferences.
2.2 Commercial and billing information: prepaid balance and usage history, order and transaction records, invoices, billing contacts, and payment verification information. Card details are collected and processed directly by our payment provider; we do not receive full card numbers.
2.3 Technical, device, and usage information: IP address, approximate location inferred from IP address, browser and operating system, device identifiers, access times, authentication events, API key usage, request volume, latency, error logs, token counts, selected model identifiers, and network metadata.
2.4 Support and communications information: emails, tickets, chat records, feedback, and survey responses exchanged with us.
2.5 Inputs and outputs: prompts, instructions, files, images, audio, and model responses submitted to or returned by the Service ("Customer Content"). As described in Section 5, we do not store the body of your prompts or model responses by default.
2.6 Cookies and similar technologies: when you visit the Website, we and our service providers may use cookies, pixels, SDKs, and local storage to collect device and interaction data, as described in Section 9.
2.7 Information from third parties: where permitted by applicable law, we may receive personal data from your organization, payment providers, analytics providers, model providers, and public sources.
5.1 No prompt or response storage by default. We do not store the body of prompts, files, or model responses you submit. Requests and responses are processed in memory during service delivery and are cleared after the response is returned.
5.2 No training on your content. We do not use Customer Content submitted through the Service, including prompts and outputs, to train, fine-tune, or improve any model.
5.3 Necessary forwarding. To deliver the capability you request, your requests are forwarded to the relevant third-party model providers. Those providers process data under their own terms and privacy notices, and we encourage you to review them before use.
5.4 Metadata we record. For billing, statistics, performance monitoring, security, and abuse prevention, we record request metadata such as token counts, selected model, request time, response latency, quota consumed, status codes, error messages, account and token identifiers, and network metadata. Except for the limited cases in Section 5.5, these records do not contain the body of prompts or responses.
5.5 Limited exceptions. We may temporarily process or retain related content where:
6.1 Service providers: vendors and consultants supporting cloud hosting, infrastructure, analytics, security, payment processing, customer support, and compliance.
6.2 Model and infrastructure providers: model providers and cloud/infrastructure providers as necessary to process requests, return outputs, and maintain service continuity.
6.3 Payment providers and financial institutions: to process payments, verify transactions, prevent chargebacks, and administer billing.
6.4 Legal and safety recipients: where necessary to comply with law, regulation, legal process, or governmental requests, to enforce our rights and policies, to protect the rights, safety, and property of us, our users, and third parties, or to respond to emergencies.
6.5 Corporate transactions: in financing, audit, merger, acquisition, reorganization, or asset sale, under customary confidentiality protections.
6.6 At your direction or with your consent.
We do not sell your personal data, and we do not use it for cross-context behavioural advertising.
We use commercially reasonable administrative, technical, and organizational safeguards, including encryption in transit (TLS), access controls, audit logging, network security measures, vendor diligence, and role-based access restrictions. No method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your credentials confidential.
We retain personal data for as long as reasonably necessary for the purposes described in this policy, including providing the Service, maintaining accounts, meeting legal obligations, resolving disputes, and preventing fraud. Retention periods vary by data type, service, and legal requirement: account, billing, and transaction records are kept for the duration of the relationship and for the period needed for accounting, tax, and compliance purposes; support records are kept for the period needed to resolve the issue and maintain a support history; security and compliance records are kept for the period needed to investigate and respond to incidents; prompts and responses are not stored by default (see Section 5). When data is no longer needed, we delete, anonymize, or de-identify it.
We and our service providers may use cookies, pixels, SDKs, and local storage on the Website to: operate, secure, and maintain the Website; remember preferences and settings; understand traffic and usage patterns; diagnose performance issues and improve the Website; and, where permitted, support communications and measurement. We use website analytics services (such as Google Analytics) for this purpose. You can control cookies through your browser settings; disabling cookies may affect parts of the Website.
Depending on your location and circumstances, you may have the right to: know whether we process your personal data; access or obtain a copy of certain personal data; correct inaccurate personal data; delete personal data; restrict or object to certain processing; withdraw consent where processing is based on consent; request portability of certain personal data; and opt out of marketing communications. To exercise these rights, contact us as described in Section 13. We may need to verify your identity and may limit or deny requests where permitted by law.
The Website and Service may link to or integrate with third-party services. This Privacy Policy does not apply to them, and we are not responsible for their privacy practices. We encourage you to review their privacy notices.
The Website and Service are not intended for individuals under 18, and we do not knowingly collect personal data from them. If you believe a minor has provided personal data to us, please contact us and we will take appropriate steps.
If you have questions about this Privacy Policy or your personal data, or wish to exercise your rights, please contact us at support@tokenmoo.com.
We may update this Privacy Policy from time to time. When we do, we will post the revised version on the Website and update the "Last updated" date above; where required by law, we will provide additional notice or obtain consent.
This Privacy Policy is issued by AI Champion Limited and applies to www.tokenmoo.com and related services.