1. Who we are
This Service is operated by GPTokenz Pte. Ltd. ("we", "us"). We provide pay‑per‑use access to third‑party AI models.
2. What data we process
- Account data: federated identity.
- Billing data: prepaid balance, transactions ledger, payment confirmations from our payment processor. We do not receive nor store your card details.
- Operational logs: strictly limited metadata for fraud prevention, abuse detection, and security.
- Prompts and outputs: transmitted to the chosen model provider to deliver the Service. Not persisted by us after delivery.
3. What we do not process
We do not sell or share personal data. We do not build advertising profiles. We do not collect nor infer special categories of personal data intentionally. Do not enter sensitive personal data in prompts.
4. Purposes and legal bases
- Provide the Service: process prompts with model providers and return outputs. Basis: contract necessity.
- Billing and fraud prevention: maintain balances and transaction records; detect abuse. Basis: contract necessity and legitimate interests.
- Security and compliance: logs to secure the Service; respond to lawful requests. Basis: legitimate interests and legal obligation.
- Support: respond to user enquiries. Basis: legitimate interests or consent where applicable.
5. Model providers and processors
We forward your prompts to third‑party model providers you select. They process data under their own terms and privacy policies.
6. Cookies and analytics
By default, we avoid tracking cookies and third‑party analytics. If we later add essential cookies (e.g., session) or privacy‑respective analytics, we will update this Policy and controls.
7. Data retention
- Prompts and outputs: not persisted after delivery.
- Account and billing metadata: retained for the life of the account and as required by law and accounting rules.
- Security logs: kept for minimal rolling windows needed to detect and investigate abuse.
8. International transfers
Model processing or infrastructure may involve transfers outside Singapore. We use reasonable safeguards and reputable providers. If required, we implement contractual protections.
9. Your rights
Subject to limits under Singapore’s PDPA and other laws, you may request access, correction, or deletion of your personal data. You may withdraw consent where processing relies on consent. We will respond within a reasonable time.
10. Security
We implement technical and organisational measures proportionate to risk. No system is perfectly secure. Users should avoid entering sensitive personal data in prompts.
11. Children
This Service is not directed to children under 13. Do not use the Service if you are under the legal age in your jurisdiction without parental consent.
12. Changes
We may update this Policy. Continued use after changes indicates acceptance. We will revise the “Last updated” date.
13. Contact
For privacy requests or questions, contact: Feedback Form