Privacy Policy
This policy explains what DiscountedTokens collects, why it is used, where it goes, and the choices available to you.
1. Scope and operator
This policy applies to discountedtokens.com, its account dashboard, checkout, and API. The service is operated by Luca Dominguez in Canada. The privacy contact is support@discountedtokens.com.
2. Information collected
- Account information: email address, password hash, account identifier, session token, account creation time, credit balance, and API-key metadata. Plaintext passwords and issued API keys are not stored.
- Guest checkout: receipt email, IP address, order identifier, amount, currency, payment method, status, payment reference, and timestamps.
- API usage: account or hashed key identifier, selected model, input/output token counts, metered cost, and request time. Prompts and model responses are proxied to the upstream model provider but are not intentionally written to the DiscountedTokens application database.
- Site analytics: with permission, a one-way hash derived from IP address and user agent, page path, date, and timestamp. We do not use third-party advertising trackers.
- Support: messages and attachments you send by email or Telegram.
3. Purposes and legal bases
Information is used to create and secure accounts, deliver and meter API access, process payments, issue receipts, prevent fraud and abuse, answer support requests, maintain service reliability, meet tax/accounting obligations, and, with consent where required, understand aggregate site traffic. Depending on your location, the bases are contract performance, legitimate interests, consent, and legal obligations.
4. Service providers and international transfers
Data may be processed by Cloudflare (hosting, security, and network logs), Stripe (card checkout), Coinbase or the displayed crypto-payment provider (crypto settlement), Resend (transactional email), and third-party upstream model/API providers needed to fulfill API calls. These providers may process data outside your country under their own terms. Payment card details are entered with Stripe and are not stored by DiscountedTokens.
5. Model input warning
Prompts and outputs are transmitted to third-party upstream providers. Do not submit passwords, payment-card data, health records, government identifiers, confidential client data, or other sensitive information unless you have assessed and accepted the upstream provider's terms and safeguards.
6. Retention
- Login sessions expire after seven days.
- Account and API-key metadata remain while the account is active and for a reasonable period afterward for security and dispute handling.
- Purchase and payment records may be retained for up to seven years where needed for tax, accounting, fraud, and legal obligations.
- Usage records are retained as needed for billing, support, abuse prevention, and account reporting.
- First-party analytics records are intended for trend reporting and may be retained for up to thirteen months.
- Support records are retained as needed to resolve the request and document the outcome.
7. Security
Transport uses TLS. Passwords and API keys are hashed at rest; API keys are revealed once. Edge rate limits, frame denial, restrictive security headers, and access controls are applied. No system is perfectly secure. You are responsible for protecting keys and promptly reporting suspected compromise.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also complain to the Office of the Privacy Commissioner of Canada or your local regulator. Send requests from the account email to support@discountedtokens.com. Identity verification may be required. We aim to respond within 30 days.
9. Sale, advertising, and children
We do not sell personal information or use it for cross-context behavioral advertising. The service is not directed to children under 18.
10. Changes
Material changes will be posted here with a new effective date. Continued use after a change takes effect means the updated policy applies, subject to rights that cannot be waived.