Privacy Policy

1. Who we are

Tokeburn is operated by Nadine Friday, a sole trader in the United Kingdom, acting as data controller. Contact: hello@tokeburn.com.

2. What we collect

• Account data: your email address and authentication details, handled via our auth provider (Supabase).
• Usage and token data: token counts, model and tool names, timestamps, and computed costs from the AI tools and API providers you connect, so we can calculate your metrics.
• Revenue you enter: any revenue figures you choose to input, used only to compute your $/Mt score.
• Leaderboard handle: if you opt in, your X (Twitter) handle, to display your ranking.
• Payment data: handled by Paddle, our merchant of record. We do not store your card details; we receive confirmation of your subscription status from Paddle.
• Basic technical data: standard logs and analytics needed to run and secure the service.

3. How we use it

To provide the service, calculate and show your metrics, run the leaderboards you opt into, process your subscription, and improve and secure the product. We do not sell your data.

4. Legal basis (UK GDPR)

We process your data to perform our contract with you (providing the service), on the basis of your consent where you opt in (for example, the leaderboard), and for our legitimate interests in running and securing the product.

5. Sharing

We share data only with the processors that run Tokeburn: Supabase (database and auth), Paddle (payments), and our hosting and infrastructure providers. Connected third-party tools provide data to us at your direction. We disclose data if required by law.

6. Retention

We keep your data while your account is active and for a reasonable period afterwards, then delete or anonymise it. You can request deletion at any time.

7. Your rights

Under UK GDPR you can access, correct, delete, or export your data, and object to or restrict certain processing. Email hello@tokeburn.com to exercise these. You can also complain to the UK ICO.

8. Data location and security

We use reputable providers and reasonable measures to protect your data. Some providers may process data outside the UK under appropriate safeguards.

9. Changes

We may update this policy; the "last updated" date shows the latest version.