Last updated: April 6, 2026 | Effective date: April 6, 2026
TokenON AI Tokens OS operated by HUI INTERNATIONAL TRADE PTE. LTD. (Singapore) (hereinafter "we" or "us") is the data controller for your personal information on this platform (tokenon.ai and its related business subdomains, hereinafter the "Platform"), responsible for the compliance and security of personal data processing activities.
Contact: contact@tokenon.ai
The operating entity information is subject to the official website, filing information and externally signed documents.
This Privacy Policy is formulated in accordance with the Singapore Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR) where applicable, and other relevant data protection laws and regulations.
We collect personal information following the principle of data minimization, specifically including:
1. Account Registration and Identity Verification: Phone number, email address, company name, contact person name. Purpose: Account creation, identity verification, account security.
2. Business Verification (KYB/KYC): Business registration information, legal representative information, identification numbers. Purpose: Business identity verification, compliance review. Processing: ID numbers are displayed with masking, showing only the first 3 and last 3 characters.
3. Service Usage Data: API call records, IP addresses, device identifiers, browser type. Purpose: Billing and settlement, service quality monitoring, security protection.
4. Payment Information: Top-up transaction records, payment order numbers. Purpose: Completing payment transactions, financial reconciliation. We do not store complete bank card information.
We process your personal information on the following lawful bases:
(a) Necessary for the performance of a contract to which you are a party;
(b) Necessary for compliance with a legal obligation (e.g., anti-money laundering, tax reporting);
(c) Based on your consent (e.g., marketing notifications, non-essential data collection).
We do not use personal data for automated decision-making or user profiling.
For prompt and completion content transmitted through the Platform API, the Platform acts solely as a technical relay layer:
(a) The Platform does not store, analyze, or use conversation content for training;
(b) Call metadata (model name, token count, timestamp) is used only for billing and service quality monitoring;
(c) Conversation content is transmitted via encrypted channels to upstream AI model providers (see Section 7 on cross-border data transfer).
(a) Storage Location: User data is stored on servers located in Singapore and other jurisdictions as required for service delivery.
(b) Security Measures: Transport layer encryption (TLS 1.2+), access controls, operational audit logs, sensitive field masking.
(c) Retention Period: Data is retained during the account period and for 30 days after account closure; deleted after the minimum retention period required by applicable laws. Transaction records are retained for at least 5 years in accordance with accounting regulations.
(d) Security Incidents: In the event of a personal data breach or other security incident, we will promptly notify affected users and report to relevant authorities as required by law.
To provide AI model API relay services, API call content (prompt/completion) may be transmitted to AI model providers located in other jurisdictions (e.g., OpenAI, Anthropic in the United States).
We take the following measures to ensure the security of cross-border data transfers:
(a) Obtaining your consent before using services involving cross-border data transfers;
(b) Implementing appropriate safeguards such as standard contractual clauses where required;
(c) Applying data minimization to cross-border transfers, transmitting only API call technical parameters without user identity information;
(d) Requiring overseas recipients to protect personal data to a standard no lower than applicable law.
You have the right to refuse cross-border data transfers, but this may result in inability to use certain AI model services.
We do not share your personal information with third parties except in the following circumstances:
(a) With your explicit consent;
(b) Providing necessary transaction information to payment service providers to complete payments;
(c) As required by government authorities exercising their legal powers;
(d) Other circumstances stipulated by applicable laws and regulations.
The Platform uses cookies and browser local storage (localStorage) to maintain login status and personalization settings. You may manage cookies through your browser settings, but disabling them may affect the normal use of certain features.
Under applicable data protection laws, you have the following rights:
(a) Right to Information and Decision: Know how your personal data is processed and the right to restrict or refuse processing;
(b) Right of Access and Portability: View and obtain a copy of your personal data;
(c) Right to Rectification: Correct inaccurate or supplement incomplete personal data;
(d) Right to Erasure: Request deletion of personal data when the processing purpose has been achieved or you withdraw consent;
(e) Right to Withdraw Consent: Withdraw previously given consent, without affecting the lawfulness of processing before withdrawal;
(f) Right to Account Deletion: Apply to delete your account; we will complete processing within 30 days.
To exercise any of the above rights, please contact: contact@tokenon.ai. We will respond within 15 business days.
This Platform is designed for businesses and adult individual users and does not proactively provide services to minors under the age of 16. If processing personal information of minors under 16, we will obtain consent from their parents or guardians. If we discover that information has been inadvertently collected from minors, it will be deleted immediately.
We may revise this Privacy Policy from time to time. The revised policy will be published on the Platform. Material changes will be communicated to users via in-platform notifications or email. Changes involving the purpose, method or types of personal data processed will require your renewed consent.
If you believe our personal data processing activities have infringed upon your legitimate rights, you may file a complaint with the relevant data protection authority.
Contact email: contact@tokenon.ai
tokenon.ai | contact@tokenon.ai