Privacy Policy

The data controller for this service is:

For payment data, Creem (Armitage Labs OÜ) is the controller, because it is the Merchant of Record and the seller of record for every order.

Text you submit is sent to our server, tokenized in memory, and discarded when the response is returned. It is not written to a database, not written to application logs, and not used to train anything.

It is also never forwarded to any model provider. Tokenization runs locally against byte-pair encoding tables, so no third party sees your prompt.

One consequence worth stating plainly: because we keep no history, we cannot recover a past analysis for you.

• A session cookie. If you activate a Pro license we set one signed, HttpOnly cookie named th_session. It holds your license key, license instance id, and your Creem customer and subscription ids. It is strictly necessary for the paid service to work, so it is set without a consent banner. It expires after 30 days.
• Server logs. Our hosting provider records request metadata such as timestamp, path, status code and IP address, for security and debugging. These are retained for a short period by the provider and never contain your submitted text.
• Support email. If you email us, we keep that correspondence so we can help you and keep a record of what was agreed.

We set no advertising cookies, run no third-party analytics, and do not fingerprint or profile you.

We never receive, see or store your card number. Checkout happens on Creem's hosted page, and they process the payment as Merchant of Record.

From them we receive only what is needed to recognise a paid customer: a customer id, a subscription id, a license key, your email address, the country used for tax, and the status of your subscription. We use it to grant access, to open your billing portal and to answer support requests.

• Creem -- payments, subscription lifecycle, license keys, invoices and tax compliance.
• Our hosting provider -- serves the application and processes requests in transit.

Both may process data outside your country of residence. Where that involves a transfer out of the EEA or UK, it relies on the processor's own transfer safeguards, such as standard contractual clauses.

Where the GDPR or a comparable regime applies, we rely on: performance of a contract for operating your subscription and session; legitimate interests for security logging and preventing abuse; and legal obligation for tax and accounting records, which our Merchant of Record retains as the seller.

Submitted text: not retained. Session cookie: 30 days, or until you sign out. Server logs: as retained by our hosting provider, typically days to a few weeks. Support email: while it is useful, and then deleted. Order and tax records: held by Creem for the period their legal obligations require.

Depending on where you live you may have the right to access, correct, delete, port or restrict processing of your personal data, and to object to it. To exercise any of these, email support@mytokenhub.site. We respond within 3 business days and act within 30 days.

Since we hold almost nothing beyond your session, most requests about order or billing data are best directed at Creem through the customer portal. We will help you reach them if that is easier.

You can delete our cookie at any time by signing out on your account page or by clearing cookies in your browser.

The service is for professional use and is not directed at children under 16. We do not knowingly collect their data.

If this policy changes, the date at the top changes with it. Material changes affecting an active subscription will be announced by email.