Legal
Privacy Policy
Last updated: September 2026
Cross-border data processing: Cross-border data processing: When you use TokenPort, your input data enters China's isolated computing zone in Xiamen for AI inference. It will not be re-exported to other overseas third parties. Only AI-generated output is returned to you.
1. Scope and Eligibility
This Privacy Policy applies to overseas entities only. This service is not available to users located in Mainland China. By using TokenPort, you confirm that you are an overseas entity and that your use of the service complies with applicable laws in your jurisdiction.
2. Data We Collect
We collect account registration data (company name, contact email, billing information), API usage data (token counts, model used, timestamps, sub-account identifiers), audit log data (API call metadata for compliance and billing purposes), and technical data (IP addresses, request headers) for security and fraud prevention. We do not collect or store the content of your prompts or model outputs beyond the retention period specified in your plan.
3. Data Processing — Inbound Pilot Statement
TokenPort operates under the Xiamen Cross-Border Inbound Data Processing Pilot. When you submit API requests, your input data (prompts) enters China's isolated computing zone in Xiamen for AI inference processing. This data processing is conducted in accordance with the official pilot definition and applicable Chinese regulations governing cross-border inbound data processing. Your input data will not be re-exported to any other overseas third parties. Only AI-generated output results are returned to you. By using this service, you explicitly consent to this cross-border data processing arrangement.
4. Data Retention
Audit log data is retained for 30 days (Pay-As-You-Go) or 90 days (Enterprise Commit Plan) from the date of the API call. Account and billing data is retained for the duration of your account plus 7 years for legal and tax compliance purposes. You may request deletion of your account data by contacting us, subject to legal retention obligations.
5. Data Sharing
We do not sell your personal data. We share data only with: Xiamen Token Factory (China Mobile) for the purpose of AI inference processing within the isolated computing zone; payment processors for billing purposes; and legal authorities when required by applicable law. We do not share your input data or output data with any other overseas third parties.
6. Security
API traffic is routed exclusively through a dedicated cross-border private line, isolated from the public internet. We implement industry-standard security measures including TLS encryption in transit, access controls, and regular security reviews. Enterprise customers benefit from additional security controls as specified in their contracts.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@tokenport.ai. We will respond to verified requests within 30 days. Note that some data may be retained for legal compliance purposes even after account deletion.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or dashboard notification. Continued use of the service after the effective date constitutes acceptance of the updated policy.
9. Contact
For privacy-related inquiries, contact us at privacy@tokenport.ai. For general inquiries, contact contact@tokenport.ai.