Privacy Policy

tknctrl ("we," "our," or "us") operates the website tknctrl.cloud and the tknctrl prompt optimization service (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

Account information. When you register, we collect your email address and, optionally, your display name.

Payment information. Payments are processed by Stripe, Inc. We do not store your full card number, CVC, or expiry date on our servers. We receive and store a Stripe customer ID and the last four digits of your card for display purposes.

Prompt content. Text prompts and UI screenshots you submit are transmitted to our servers solely to generate an optimized prompt. Screenshots are not stored after processing. Text prompts may be temporarily cached in session memory to support the Refine feature and are not persisted beyond your active session unless you explicitly save them.

Usage data. We collect standard server log data including IP address, browser type, referring pages, pages visited, and timestamps. We also collect aggregate usage metrics (e.g., number of prompts generated) to improve the Service.

Cookies and local storage. We use authentication cookies issued by Supabase to keep you logged in. We do not use advertising or third-party tracking cookies.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process payments and manage your subscription through Stripe.
• Send transactional emails (receipts, password reset, account notices).
• Monitor usage to enforce plan limits and prevent abuse.
• Improve the Service through aggregate, anonymized analytics.
• Respond to support requests and communications from you.
• Comply with applicable laws and legal obligations.

We do not sell your personal information. We do not use your prompt content to train AI models or share it with third parties for marketing purposes.

We share your information only in the following circumstances:

• Stripe, Inc. — to process subscription payments. Stripe's Privacy Policy governs their use of your data.
• Supabase, Inc. — to provide authentication and database services. Data is stored in encrypted form.
• xAI — prompt content is forwarded to the xAI API solely to generate an optimized output. xAI's usage policies apply.
• Legal authorities — if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with adequate notice provided to affected users.

We retain your account information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at contact@tknctrl.cloud. Upon deletion, your personal data will be removed within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., invoice records for up to 7 years).

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for database records, and strict access controls. However, no method of transmission over the Internet is 100% secure.

If we become aware of a data breach that affects your personal information, we will notify you within 72 hours where required by applicable law.

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — request a machine-readable export of your data.
• Objection — object to certain processing activities.
• Restriction — request that we limit how we use your data.

To exercise any of these rights, email us at contact@tknctrl.cloud. We will respond within 30 days.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

Your information may be transferred to and stored on servers located in the United States. By using the Service, you consent to this transfer. We use service providers (Stripe, Supabase, xAI) that comply with applicable data protection frameworks including the EU-US Data Privacy Framework where applicable.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your personal data, please contact us:

tknctrl
Email: contact@tknctrl.cloud
Website: tknctrl.cloud