Last updated: September 29, 2026
We collect information you provide directly (name, email, organization details), usage data (model, token counts, cost, session and repository identifiers, and the email your coding agent reports), and technical data (IP address, browser type, device info) to operate and improve the Service. If prompt capture is on (see section 2), we also receive the text of the prompts you type into connected coding agents.
By default, `npx tokenfin@latest setup` turns on prompt logging in Claude Code, Codex and Gemini CLI, so the text of each prompt you type is sent to TokenFin alongside its token counts and shown to your workspace in Prompt Analytics. We never receive model responses, your files, or your model-provider API keys. You can opt out on any machine with `npx tokenfin@latest setup --no-prompts`; a workspace owner or admin can switch prompt capture off for the whole workspace in Settings → Workspace, in which case prompt text is discarded on arrival. Captured prompt text is deleted automatically after 90 days, and owners can delete it sooner in Settings → Data.
We use collected data to provide and improve the Service, send transactional emails (account confirmations, alerts), generate aggregated analytics, and comply with legal obligations. We do not sell your personal data.
Your data is stored on Supabase-hosted PostgreSQL in the US. We use 256-bit TLS encryption in transit and AES-256 at rest. API keys are stored as SHA-256 hashes. The few keys we must be able to show again (the workspace setup key and unopened one-time reveal links, which expire) are additionally kept AES-256-GCM encrypted.
We use session cookies for authentication and local storage for UI preferences. We do not use third-party advertising trackers. You can disable cookies in your browser but some features may not function correctly.
We share data with subprocessors necessary to operate the Service (Supabase, email providers). We do not share your data with third parties for marketing. We may disclose data if required by law.
Usage data is kept until you delete it. Workspace owners can delete monitoring data older than 7, 30 or 90 days, or all of it, at any time in Settings → Data, and can set automatic retention so older data is deleted daily. Captured prompt text expires after 90 days, and prompt capture can be switched off per machine or for the whole workspace (section 2). Account data is retained while your account is active and for 30 days after deletion, then permanently erased.
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at privacy@tokenfin.io. We respond within 30 days.
The Service is not directed to children under 16. We do not knowingly collect personal information from minors. If you believe we have collected such data, contact us immediately.
We may update this policy from time to time. We will notify you of significant changes via email or an in-app banner. Your continued use of the Service after changes constitutes acceptance.
For privacy-related questions or data requests, email us at privacy@tokenfin.io or write to CuriousDevs, Privacy Team.