This page summarises your rights under the EU General Data Protection Regulation (GDPR) when you use Token Harbor. It complements our Privacy Policy, which covers the full lifecycle of personal data handled by the service.
What changed on November 9, 2026
- Interest categories — if free models are on and you share free-route content, we also use that content to infer broad interest categories, only to choose which Token Harbor offers and promotions we show you on our own website and apps. We do not give them to advertisers or other third parties. Turning free models off stops this straight away, and your existing interest summary stops being used within 20 days.
- Automated classification — on every route, free or paid, in the API and in web chat, an automated classification service reads the text of messages; we keep only the labels it returns. Safety-check excerpts are kept for 30 days.
- Retention, erasure and transfers — the retention periods we apply are listed, account erasure says what is deleted when, and we say where archived free-route content and interest categories are processed (Singapore). The full wording is in Privacy Policy §1, §4, §5, §6 and §9.
What changed on October 31, 2026
- Company and payment processor names — the data controller is named as the Singapore company behind the Token Harbor brand, and the PayPal processor is named as PayPal Pte. Ltd. (Singapore). The full wording is in the Privacy Policy §4.
What changed on October 30, 2026
- Backups and hosting — offsite backups are kept for up to 30 days, and where our API runs is described as it is: edge and serverless infrastructure in the United States and the EU, with the database in the United States. The full wording is in Privacy Policy §4 and §9.
Data controller
TH TECHNOLOGY PTE. LTD. (UEN 202630148W), which operates Token Harbor, acts as the data controller for personal data collected through tokenharbor.ai. You can reach our privacy team at legal@tokenharbor.ai.
What we process
- Account data — email address, authentication tokens, and account metadata (created-at, last sign-in).
- Billing data — top-up amounts, currency, payment processor reference IDs. Card numbers never touch our servers. Wallet top-ups are processed by Stripe (cards) or PayPal Pte. Ltd. (Singapore). Pass subscriptions are processed by Stripe. We store only order, subscription, and capture identifiers needed for reconciliation.
- Usage data — API requests, model identifiers, token counts, and the resulting cost / cashback ledger entries.
- Content data — prompts you send to models, the responses they return, and the files, pictures and voice recordings you attach. All of it is request content under Privacy Policy §1, which also describes how long it is kept. If you opt in to free models, those prompts and responses are kept and may be read by our staff; see Privacy Policy §1. On every route, an automated classification service reads the text of messages for safety checks, routing, checking whether a model answered and web-chat features; we keep only the labels it returns.
- Interest categories — if you opt in to free models, we infer broad interest categories from the free-route content you share. We use them only to choose which Token Harbor offers and promotions we show you on our own website and apps, and we do not give them to advertisers or other third parties. Paid-route content is never used for them.
Legal basis
We process personal data on three legal bases under GDPR Article 6: contract (running the gateway you signed up for), legitimate interest (fraud prevention, abuse detection, system health), and consent (optional analytics and advertising measurement, free-route content sharing and the interest categories we infer from it, and marketing emails). Reading the text of messages to run safety checks and route requests is part of running the gateway (contract) and of keeping it safe (legitimate interest). You can withdraw free-model consent from your dashboard, change your cookie choice with “Cookie settings” in the footer of every page, and unsubscribe from marketing emails with the link in any email. Withdrawing consent does not affect earlier lawful processing.
Your rights
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete personal data.
- Right to erasure — request deletion of your account and the personal data tied to it. We delete your account and your web chat history within 30 days. Archived copies of free-route content you chose to share are deleted when the archive's retention period ends (up to 24 months), and your interest summary stops being used within 20 days. Some records (billing ledger entries, abuse audit logs) are retained as legally required.
- Right to restriction — pause processing while a dispute is investigated.
- Right to data portability — download your billing history and individual conversations from your account, or email us and we will send you the rest in a structured, machine-readable format.
- Right to object — opt out of processing based on legitimate interest, including profiling. To stop interest categories, turn free models off in your dashboard: new interest-category processing stops straight away and your existing interest summary stops being used within 20 days. If you email us to object, we will point you to the same switch.
- Right to withdraw consent — for anything you opted into; doesn't affect prior lawful processing.
How to exercise your rights
Email legal@tokenharbor.ai from the address tied to your account. We respond within 30 days (extendable by 60 days for complex requests, with notice). There is no fee unless requests are manifestly unfounded or excessive.
International transfers
Token Harbor's database is in the United States, our API runs on edge and serverless infrastructure in the United States and the EU, and some data is stored in Singapore. Archived free-route content you shared, the tools we use to query it, and interest-category processing are on AWS in Singapore. The automated classification service may process the text of messages in the United States or other regions. The providers that serve your requests may process them in those or other countries. Data is encrypted in transit and stored on infrastructure that encrypts data at rest. The vendor list is Privacy Policy §4; we update it when we add a sub-processor.
Retention
Account data is retained for the lifetime of your account plus 30 days after deletion (in case you change your mind). Conversation history is kept until you delete it or close your account; a deleted conversation is permanently erased within 30 days. Billing ledger entries are retained for seven years to meet accounting obligations. Security and abuse-prevention records are kept for up to 12 months, offsite backups are kept for up to 30 days, short excerpts kept when an automated safety check flags a request are deleted after 30 days, and archived copies of free-route conversations are kept for up to 24 months. Files and images uploaded in chat and error logs are kept for 90 days; request records, including the labels returned by automated classification, for 12 months; support emails for 24 months. Your interest summary reflects roughly your last 14 days of shared free-route content and stops being used 3 days after its last refresh. The full list is in Privacy Policy §5.
Automated decision-making
Some safety and fraud-prevention measures are automated, for example rate limits, blocking of abusive traffic, and an automated age check that can decline certain content. An automated classification service labels messages for safety checks and routing. Interest categories are used only to choose which of our own offers and promotions you see; they do not decide your access to the service or your account. We do not make solely automated decisions that have legal or similarly significant effects without a way for you to ask for a person to review them: email support@tokenharbor.ai to ask for a review. Smart routing chooses which provider serves your request, based on availability and cost, but does not change the model you asked for — see our Safety policy for the “we won't swap your model” commitment.
Right to lodge a complaint
You can complain to your local data protection authority. A directory is published by the European Data Protection Board at edpb.europa.eu.
Changes
We will publish material changes to this notice on this page and, for signed-in users, in-app. The “Last updated” date at the top of the page reflects the most recent revision.
What changed on October 29, 2026
- Content data and retention — what we keep from requests, and for how long, now matches the Privacy Policy: a short-lived cache, 30-day safety-check excerpts, 30-day erasure of deleted chats, 12-month security records and backups.
- Legal basis — consent now covers free-route content sharing, and you can withdraw it from your dashboard; you can change your cookie choice with “Cookie settings” in the footer. Free-route content may be read by our staff.
- Portability — you can download your billing history and single conversations yourself, and email us for the rest.
- International transfers — we now state that some data is stored in Singapore, and no longer cite contract clauses we cannot show.
- Automated decisions — we now list the automated safety measures and say how to ask a person to review a decision. We still do not change the model you asked for.