Privacy Policy

Last Updated: October 10, 2026

YesToken("we", "us" or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This policy describes how we collect, use, and disclose personal data when you access the YesTokenwebsite and use our AI model gateway service (the "Service"), and the choices you have associated with that information.

By using the Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use the Service. We may update this policy from time to time; the date of the latest revision is shown above, and we will notify registered users by email of any material changes.

1. Personal Data We Collect

Information you provide to us

  • Account registration information, such as your email address and username.
  • Billing and transaction information when you recharge your balance (payments are processed by our payment provider, Stripe; we do not store your full card number).
  • Correspondence records if you contact us for support.
  • Identity verification material. If you use features that require real-person verification (KYC), the images, videos, or audio you submit as verification or reference material are collected and transmitted to the verification provider.

Information collected automatically

  • API usage metadata: the model called, token consumption, cost, timestamps, latency, status codes, and the API key used. We do not store the content of your prompts or model responses in our logs.
  • Device and connection information, such as IP address, browser type, and operating system, for security and abuse prevention.
  • Cookies and similar technologies required for sign-in sessions and preferences. See Section 5 for details.

2. Prompts, Inputs, and Model Providers

YesToken is a gateway: when you send a request, your input (text, images, audio, or video) is transmitted to the upstream model provider that serves the model you selected (for example OpenAI, Anthropic, Google, or other providers available on the platform). Each provider has its own data practices, which may include retaining inputs or using them for model training. We encourage you to review the data policies of the providers you use.

We do not use your prompts or model outputs to train models, and we do not sell your personal data. Our request logs store only metadata (endpoint, model, status, latency, IP address) and our usage records store only consumption metrics (tokens, cost, multiplier). Request and response bodies are not persisted.

If you submit images, audio, or video containing another person's likeness or voice (for example for video generation or identity verification), you are responsible for obtaining that person's consent where required by applicable law.

3. How We Use Your Personal Data

  • Providing and operating the Service, including routing your requests to model providers.
  • Metering usage, billing, and preventing fraud or abuse.
  • Sending service-related notices (account, billing, security, policy changes).
  • Improving the reliability and security of the Service through aggregated, de-identified statistics.
  • Complying with legal obligations and enforcing our terms.

4. How We Share Personal Data

  • Model providers: your inputs are transmitted to the provider serving the model you selected, subject to that provider's own terms.
  • Service providers: payment processing (Stripe), cloud hosting, and identity verification providers, each bound by contractual confidentiality obligations.
  • Legal requirements: we may disclose personal data in response to lawful requests by public authorities or to protect our rights, users, and the public.
  • Corporate transactions: in the event of a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction.

5. Cookies

We use strictly necessary cookies (for authentication sessions and security) and preference cookies (for language and display settings). We do not use advertising or behavioral-tracking cookies. You can disable cookies in your browser settings, but sign-in and other core features may stop working.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, meet legal and accounting obligations, and resolve disputes. Usage and request metadata is retained for a limited operational period and then deleted or anonymized. Verification (KYC) material is retained only as long as required by the verification provider and applicable law.

7. Data Security

We apply industry-standard measures including encrypted transport (TLS), hashed storage of passwords and API keys, and role-based access control. No method of transmission over the internet is completely secure; you are responsible for keeping your password and API keys confidential.

8. Your Rights and Choices

Depending on your place of residence, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. You can review and update your account information in the dashboard at any time. To exercise other rights, or to request account deletion, contact us at the address below; we may need to verify your identity before processing the request.

9. Eligibility

The Service is intended for users who are at least 18 years old. By using the Service you represent that you meet this requirement.

10. Third-Party Links

The Service may contain links to third-party websites or services. This Privacy Policy applies only to YesToken; we are not responsible for the privacy practices of third parties.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us via Telegram at @c1024s.