Overview
DeepToken provides a multi-provider AI inference gateway, billing control plane, organization workspace, and related account services. This policy explains what information we process when you use the website, dashboard, API, billing, support, and gateway services.
We process data to operate the platform, route requests to configured upstream providers, meter usage, protect accounts, and support billing and compliance workflows.
Information We Collect
- Account data such as email address, name, authentication settings, organization membership, role assignments, and security events.
- Billing and commercial records such as orders, credit balances, invoices, subscription state, payment provider identifiers, tax metadata, and partner/referral attribution.
- Gateway metadata such as API key id, organization id, model id, provider route, status code, latency, token counts, request time, cost calculation, and fallback outcome.
- Optional request and response payloads when an organization enables payload logging or support diagnostics. Payload storage is not required for normal routing and billing.
- Device and usage data such as IP address, browser, pages viewed, cookies, and product interaction events.
Gateway Request Processing
When you send a model request through DeepToken, we process the payload only as needed to authenticate the request, apply routing policy, forward it to the selected upstream provider, return the response, and meter usage.
Upstream model providers may process your request and response data under their own terms and privacy policies. You are responsible for choosing providers and models appropriate for the data you send.
How We Use Information
- Provide, secure, monitor, and improve the website, dashboard, API, gateway, billing, and support services.
- Authenticate users, issue and validate API keys, enforce quotas, apply organization permissions, and detect abuse.
- Calculate credits, usage, invoices, commissions, refunds, risk signals, and audit logs.
- Communicate service, security, billing, product, and support notices.
- Comply with applicable legal, tax, accounting, and platform security obligations.
Sharing and Subprocessors
We share information with service providers only when needed to operate DeepToken, including cloud infrastructure, database, analytics, email, payment, security, and customer support vendors.
Gateway payloads and related metadata may be transmitted to the upstream model provider selected by your routing policy. We may also disclose information when required by law, to protect rights and security, or during a corporate transaction.
Security and Retention
- API keys are stored using one-way hashes or equivalent secret-protection controls.
- Sensitive traffic uses encrypted transport; persisted records use access controls and operational monitoring.
- Request metadata is retained for billing, audit, abuse prevention, and observability. Optional payload logs follow organization settings and support workflows.
- We retain account and billing records as long as needed to provide the service, resolve disputes, meet tax/accounting obligations, and maintain security evidence.
Your Choices and Rights
You can update account information, rotate or delete API keys, manage organization members, and configure logging behavior from the dashboard where available.
Depending on your location, you may request access, correction, deletion, portability, or restriction of personal information by contacting us.