TokenmanPrivacy Policy
Effective: 21 October 2026
广州二四网络科技有限公司 ("we") runs Tokenman ("the service"). This policy says what we collect about you, why, how long we keep it, who can see it, and how you have it deleted. By signing in you agree to this policy.
1. What we collect
| Information | Where it comes from | What it is for |
|---|---|---|
| Account identity: WeChat OpenID / UnionID and nickname; or an email address; or a GitHub account ID and username | WeChat, an email code or GitHub, when you sign in | Knowing who you are and signing you in |
| Trial and request details: what you wrote when you applied, the end date | When you apply or start a trial | Reviewing and running the trial |
| Usage records: the time, model, token count and session of each model call | The service's metering | Metering quota, showing you your usage, preventing abuse |
| Session content: your instructions, the AI's replies, the code and files in the session's working directory | When you use a session | Running your session, and nothing else |
| Access records: IP address, browser type, time of visit, error logs | When you visit the service | Security and fixing faults |
We do not collect your phone number, contacts, location or payment details, we do not train any model on your content, and we never sell your information.
2. How long we keep it
- Trial accounts: within 30 days after the trial ends, the account identity, session content and usage records are deleted. A LivePage account opened for you during the trial: its key is taken back when the trial ends and your pages are kept there for 30 days; deleting your data closes that account too.
- Session content: within 30 days after a session ends or is cleaned up, its working directory and conversation are deleted.
- Usage and access records: kept for 30 days, then deleted or made anonymous.
- A full member's account identity: kept while the account exists; deleted within 30 days after it is closed.
Where a law requires a longer period, we keep it for that period.
3. Who can see it
- You: your sessions, usage and account details.
- Your team's admins: your account identity and usage records (to assign and meter quota). An admin looking into a problem may see a session's running state, but not its content, unless you agree or the law requires it.
- Our operations staff: only for maintenance, fault-finding or a security incident, and only as much as needed.
- Third parties that serve your request: your instructions and session content go to the AI model provider you use (such as Anthropic or OpenAI) to produce a reply, under that provider's own privacy policy; WeChat and GitHub handle your sign-in under theirs.
- Where a law or a competent authority requires it, we may provide the information needed.
Beyond that, we give your information to no one.
4. How we protect it
Data is stored on servers in the People's Republic of China; it is encrypted in transit; credentials and keys are read at run time and never written into a config or a log; each session runs in its own working directory.
5. Seeing, correcting and deleting it
- Sign in to see your account details and usage in the console.
- You may ask at any time to delete your session content or close your account: follow the WeChat official account 二四网络科技 and send "close account" or "delete my data". We act within 15 working days and delete the information within 30 days.
- Ask any question about this policy the same way.
6. Minors
The service is meant for adults. Anyone under 18 should use it only with a guardian's consent.
7. Changes to this policy
When we change this policy we update this page and its date; an important change is announced in the service ahead of time.