Privacy Policy

Last updated: June 9, 2026

This Privacy Policy explains how Token Station, operated by ByteFuture AI ("we", "us", "our"), collects, uses, and shares information when you use our AI gateway and related websites and APIs (the "Service"). By using the Service you agree to this Policy.

1. Information We Collect

Account information — the email address you use to sign in via magic link, and basic account settings.
Usage and billing data — for each request: the model called, token/character/request counts, computed cost, timestamp, status, and latency. We use this to meter usage and bill your account.
Request and response content — the prompts you send ("Input") and the model responses ("Output") pass through the Service so they can be forwarded to the provider and metered. Depending on your account's logging setting, request bodies may be written to your account's request log.
Payment information — when you add funds, payments are processed by our payment processor (e.g. Stripe); we do not store full card numbers.
Technical data — IP address, request headers, and similar information generated automatically when you interact with the Service.

2. How We Use Information

operate, maintain, and secure the Service and route your requests to the provider you select;
meter usage, calculate charges, and manage balances and quotas;
detect, prevent, and investigate fraud, abuse, and security incidents;
provide support and respond to your requests; and
comply with legal obligations.

3. Third-Party AI Providers

When you call a model, your Input is transmitted to the corresponding upstream provider (for example OpenAI, Anthropic, or Google) so it can generate a response. That content is then subject to that provider's privacy policy and data practices. Review the policies of any provider whose models you use.

We pass your Input to the provider only as needed to fulfill your request. We do not use your Input or Output to train our own models, and we do not sell your personal information.

4. How We Share Information

We share information only: (a) with upstream model providers, as needed to fulfill your requests; (b) with service providers who process data on our behalf (such as hosting, email delivery, and payment processing) under appropriate confidentiality obligations; (c) when required by law or to protect rights, safety, and security; and (d) in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention

We retain account and usage records for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Request-content logs are retained per your account's logging configuration. You may request deletion of your account as described below.

6. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. API keys are stored as one-way hashes and cannot be retrieved after creation. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Cookies

We use a single first-party session cookie (gw_session) to keep you logged in to the dashboard. Our marketing pages may use privacy-respecting analytics to understand aggregate traffic. We do not use third-party advertising cookies.

8. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond consistent with applicable law.

9. International Transfers

Because the Service routes requests to providers that may operate in different countries, your information may be processed outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact

Questions about this Policy or your data? Email team@bytefuture.ai.