Privacy
Sub-processors
The companies that process personal data on our behalf, what they do, where, and under which safeguards.
Last updated:
Draft — pending review by counsel (owner action O-05)
This document is a draft prepared for legal review. It may change before Tokentide launches publicly, and placeholders marked as pending will be completed.
On this page
A sub-processor is a third-party company we engage to process personal data on our behalf while providing Tokentide. This page lists our sub-processors, what each one does, the data it handles, where it processes it and the safeguard we rely on for international transfers. It forms Annex III of our Data Processing Agreement and complements our Privacy Policy.
Whatever the provider, the content of your requests is never stored: it passes through our hosting provider's memory on its way to the model and back. All the data we store is stored in the United States.
For transfers outside the European Economic Area, we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), with supplementary measures such as encryption in transit and at rest and zero retention of the content of your requests. See International transfers in our Privacy Policy.
Current sub-processors
Providers marked as planned are not used yet. We'll publish their details here, with the usual notice, before they start processing personal data.
Stripe and card payments
Stripe processes every card payment, in one of two roles. For card purchases sold through Stripe Managed Payments, Stripe is the merchant of record: it sells the purchase to you and acts as an independent controller for that sale, under its own privacy policy. For card purchases that we sell, including automatic top-ups, Stripe is our payment processor: it processes the payment and stores the card you save for automatic top-ups. We never receive or store your full card details.
Model providers
Venice runs inference for every request. On Private models, Venice retains nothing. If you enable Anonymized models, the third-party provider of the model you choose (for example, the provider of a Claude, GPT or Gemini model) also receives the content of those requests, through Venice and without your identity, and may retain it under its own policy. You choose these providers request by request, and each model shows which kind it is; they act under their own terms with Venice. See Privacy and zero data retention.
Changes to this list
We announce every new or replacement sub-processor on this page at least 30 days before it starts processing personal data. Customers who have signed our Data Processing Agreement also receive the notice by email.
Get notified
To receive these notices by email, write to privacy@tokentide.app with the subject "Sub-processor notices".
Objections
During the notice period, you can object to a change on reasonable data protection grounds by writing to privacy@tokentide.app. We'll look for a solution with you in good faith. If we can't find one, you can end the affected part of the Service before the change takes effect, and we'll refund your unused paid balance.
More information
- How we use personal data: Privacy Policy.
- Our commitments as a processor: Data Processing Agreement.
- How we protect the Service: Security.