Privacy Policy

Last updated: 2026-04-30

This Privacy Policy explains what personal data we collect, how we use it, and your rights over it. It applies to tokenhub.sandboxclaw.com and the API endpoints under llm.sandboxclaw.com.

Data we collect

• Account data: email address, hashed password, account identifiers, account status, verification status, and timestamps.
• Billing data: Stripe customer, Checkout, payment, refund, dispute, and receipt identifiers; top-up amount, currency, credit ledger entries, and billing support records. Stripe processes card details directly.
• Usage and routing data: API key prefix or identifier, selected model, provider route, token counts, amount charged, timestamps, HTTP status, request IDs, error codes, rate-limit events, and client network metadata needed to operate and secure the gateway.
• API content: prompts, uploaded content, tool inputs, and model outputs are transmitted to the upstream provider selected by the route. We do not use API content to train token-hub models.
• Support data: messages you send to support, legal, privacy, or billing contacts.

How we use data

We use data to operate the Service, authenticate users, create and revoke API keys, route requests, meter and bill usage, process payments and refunds, provide support, debug failures, prevent abuse, comply with law, and protect token-hub, customers, and upstream providers. We do not sell your personal data.

Third parties

Payments are processed by Stripe. API requests may be forwarded to Anthropic, OpenAI, Google, DeepSeek, Alibaba Cloud/Qwen, Moonshot, Zhipu, or other model providers we make available. Infrastructure, email, logging, security, and support vendors may process limited data for the purposes above. Each upstream provider's policy governs request and response content while it is processed by that provider.

Retention

We retain account data while your account exists and for a reasonable period afterward where needed for security, fraud prevention, legal, tax, or dispute purposes. Billing records and credit ledger records may be retained as required for accounting, tax, refund, chargeback, and audit obligations. Usage metadata is retained as needed for metering, customer support, abuse prevention, reliability, and aggregate reporting. Debug logs are intended to be short-lived unless they are needed to investigate security incidents, abuse, billing disputes, or legal requests.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain processing of your personal data. Some records cannot be deleted immediately when they are needed for legal, billing, fraud prevention, security, or dispute obligations. To make a privacy request, contact us at the address below.

Security

We use technical and organizational measures designed to protect account, billing, and API data, including hashed passwords, scoped API keys, transport encryption, access controls, and operational logging. No internet service can be guaranteed to be perfectly secure.

Contact

Privacy questions: privacy@sandboxclaw.com .