Privacy policy

01Who we are

tokensupply is a platform for businesses that sell digital goods such as game keys, gift cards, software licences, subscriptions and top-ups. Sellers keep one inventory, connect their sales channels, and let tokensupply sync stock, deliver codes and apply pricing rules for them.

The service is operated by Token Supply Private Limited (CIN U62099KA2026PTC226340), WeWork Manyata Redwood, D3, 9th Floor, Manyata Tech Park, Bengaluru 560045, Karnataka, India. For personal data we handle for our own purposes, such as your account, we decide how and why it is used.

02Information we collect

Depending on how you use tokensupply, we collect:

• Account details: your name, work email, company name, role, sign-in details and billing information.
• Channel connections: the API keys, tokens or other credentials you provide to connect your sales channels, and the data we receive through those connections, such as listings, stock levels, prices and orders.
• Inventory: the codes, keys and other digital goods you upload, with their product details.
• Order and buyer details: when a sales channel passes it to us so an order can be fulfilled, this can include order numbers, what was bought, and the buyer’s name, email address or country.
• Usage and device data: pages and features you use, actions in the app, your IP address, browser and device type, and logs that keep the service running and secure.
• Communications: messages you send us, such as support requests and feedback.

03How we use information

We use information to:

• provide the service: keep your inventory, sync stock across your channels, deliver codes to fulfil your orders and apply the pricing rules you set;
• create and secure your account, and detect and prevent fraud, abuse and security incidents;
• answer support requests and send service messages, such as security alerts, receipts and changes to these terms;
• understand how the service is used so we can fix problems and improve it;
• bill you and keep financial records;
• meet our legal obligations and enforce our terms.

If we send marketing emails, we do so only where the law allows, and every one includes a way to opt out.

04Buyer data we process for sellers

When a sales channel sends us an order, we process the buyer information in it on the seller’s behalf and only to fulfil that seller’s orders and keep their records. The seller is responsible for having a lawful basis to share it with us and for answering their buyers’ requests about it. We help sellers meet those requests where we can.

05How we share information

We do not sell personal data. We share information only:

• with service providers that host, run or support tokensupply for us, such as cloud hosting, email delivery, payment processing and support tools, under contracts that limit how they use it;
• with the sales channels you connect, when we send stock, prices and fulfilment details to them on your instructions;
• with professional advisers, such as lawyers, accountants and auditors;
• with authorities, when the law requires it or when it is needed to protect the rights, property or safety of our users, the public or tokensupply;
• with a buyer or successor if our business is merged, acquired or reorganised, in which case this policy will continue to protect your information.

06International transfers

We and our service providers may process information outside the country where you live, including outside India. When we do, we take steps designed to keep it protected as described in this policy and as required by applicable law.

07How long we keep information

We keep information for as long as your account is active and as needed to provide the service. When you close your account, we delete or anonymise your information within a reasonable period, unless we need to keep some of it longer to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements.

08Security

We use administrative, technical and physical safeguards designed to protect information, including encryption in transit and access controls. No system is completely secure, so please use a strong password, keep your credentials private and tell us straight away at support@tokensupply.io if you think your account has been accessed without permission.

09Your rights

Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023 and data protection laws in the EU and UK, you may have the right to:

• access the personal data we hold about you and get a summary of how it is used;
• correct, complete or update it;
• have it erased;
• withdraw consent where we rely on it, without affecting earlier processing;
• object to or restrict some processing, and receive your data in a portable format;
• nominate someone to exercise these rights for you if you are unable to;
• raise a grievance with us and, if you are not satisfied, complain to your data protection authority, such as the Data Protection Board of India.

To exercise any of these rights, email support@tokensupply.io. We may need to verify your identity before we act on a request.

10Cookies

We use a small number of cookies and similar technologies. Our cookie policy explains what they are and how to control them.

11Children

tokensupply is built for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children.

12Changes to this policy

We may update this policy as the service and the law change. We will change the date at the top when we do, and if a change is significant we will tell you by email or in the app before it takes effect.

13Contact and grievances

Questions, requests and grievances about privacy can be sent to our grievance officer at support@tokensupply.io or by post to Token Supply Private Limited, WeWork Manyata Redwood, D3, 9th Floor, Manyata Tech Park, Bengaluru 560045, Karnataka, India. We will acknowledge and respond within the time required by applicable law.