Privacy Policy
This policy explains what Token2Any collects when you use www.token2any.com, why, and what you can ask us to do about it.
1. What we collect
- Account data: email, display name, sign-in provider and internal account identifier.
- Billing data: plan, credit balance, subscription identifiers and processor status. Card numbers stay on the processor page.
- Content you submit: uploaded images, prompts, generation settings and results.
- Technical data: IP address, browser and language, pages opened and limited usage events.
- Support messages sent to support@token2any.com.
2. Why we use it
We do not sell personal data or use images and prompts to train models.
- To authenticate you, process images, keep history and balances correct.
- To bill, grant and deduct credits, and prevent fraud.
- To keep the service stable and secure through rate limiting, abuse detection and error diagnosis.
- To improve features with aggregated analytics and send necessary service notices.
3. Who processes it for us
These providers may process data outside your country under their own policies and our instructions.
- Google Firebase for authentication and the account database.
- PayPal, Stripe and Dodo Payments for payments and subscriptions.
- Vercel for hosting and content delivery.
- Model and storage providers for image jobs and temporary files.
- Google Analytics for aggregated visitor statistics.
4. Cookies and local storage
Necessary storage keeps you signed in and remembers your language. Analytics storage counts visits and feature use. You can block or clear storage in your browser.
5. How long we keep it
- Account and billing records while the account exists and as long as tax, accounting or fraud rules require.
- Uploaded files and results until deletion or account closure.
- Server and error logs for a short operational window, then rolling deletion.
- Analytics data according to the analytics tool retention setting.
6. Your rights
Write to support@token2any.com from your account address to access, correct, export or delete data, or object to a use. We answer within 30 days. EU and UK residents can also complain to their data protection authority.
7. Security
Traffic is encrypted in transit, provider API keys stay on the server, and production access is restricted. If a breach affects your data, we will notify you and the competent authority without undue delay.
8. Children
The service is not intended for anyone under 18 or the local age of majority. We do not knowingly collect children’s data; tell us if you believe a child has an account.
9. Changes and contact
We update this policy when processing changes. Controller and contact: Token2Any, support@token2any.com.