Privacy Policy
What we collect, why we collect it, and the control you keep over your data and your buyers' data.
Last updated · 15 August 2026
01Who we are
TokenSupply Private Limited ("TokenSupply", "we", "us") operates the automated key delivery service described on this site. This policy explains what personal data we collect, why we collect it, and what rights you have over it.
For data you upload about your own buyers, you are the data controller and we act as your processor, handling that data only to run the Service on your instructions.
02Information we collect
We collect three broad categories of data:
- Account data: the name, email address, company name, and billing details you give us when joining the waitlist or creating an account.
- Order and inventory data: the keys, product listings, stock counts, order IDs, and buyer email addresses we receive from the marketplaces you connect, so we can fulfil deliveries.
- Usage and technical data: log entries, IP address, browser type, and pages visited, which help us diagnose faults and keep the Service secure.
03How we use your information
We use the data above to:
- Deliver keys to your buyers and keep stock levels synchronised across your channels.
- Provide, maintain, and improve the Service, including debugging and performance work.
- Communicate with you about your account, early access availability, and material service changes.
- Detect and prevent fraud, abuse, and security incidents.
- Meet our legal, tax, and accounting obligations.
04Legal bases
Where the GDPR or a similar law applies, we rely on: performance of our contract with you (running the Service); our legitimate interests (securing and improving the Service); your consent (optional marketing email, which you can withdraw at any time); and compliance with legal obligations.
06International transfers
Our providers may process data in countries other than yours. Where we transfer personal data out of a region with data-export restrictions, we rely on appropriate safeguards such as standard contractual clauses.
07Data retention
We keep account data for as long as your account is active, and for a reasonable period afterwards to handle disputes and meet record-keeping duties.
Order records and delivered-key logs are retained so you and your buyers can resolve fulfilment questions. You can ask us to delete specific records earlier, subject to any legal obligation to retain them.
08Security
Keys and credentials are encrypted in transit and at rest, and access to production systems is restricted to staff who need it.
No system is perfectly secure, so we cannot guarantee absolute security, but if a breach affects your data, we will notify you and the relevant authorities as the law requires.
09Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent.
To exercise any of these, email support@tokensupply.io. We will respond within the period the applicable law allows. You also have the right to complain to your local data protection authority.
11Children
The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
12Changes and contact
We will update this policy as the Service evolves and will revise the date above whenever we do. If a change materially affects how we use your data, we will tell you directly.
Privacy questions and requests can be sent to support@tokensupply.io.
Questions about this page?
Email support@tokensupply.io and we'll walk you through it.
