PIKTOKEN / PRIVACY
Data boundaries.
Updated October 4, 2026.
Operational data
PikToken stores account identity, secure password credentials, sessions, hashed customer API keys, encrypted upstream credentials, token counts, request status, ledger entries, funding references, support messages and administrator audit events.
Model requests
Prompts and model responses are forwarded to the selected upstream. PikToken does not store them in usage history. Provider retention, processing regions and training policies are governed by provider terms. Confirm these terms before submitting sensitive data.
Credentials
Customer keys appear only at creation; their hash and prefix are saved. Upstream credentials are encrypted server-side and never returned after saving. Encryption keys are held in protected hosting configuration.
Cookies and providers
Essential cookies maintain sessions. Cloudflare hosts the site and structured records. The configured email provider delivers verification and recovery mail. No advertising analytics are added.
Visitor statistics
When visitor statistics are enabled, they cover public pages only (home, models, documentation, status, privacy and terms), never the dashboard, administration, sign-in or payment pages.
A page view would record the page address without its query or fragment, together with your full IP address; the IP address is not anonymised. Raw records would be kept for 365 days and aggregated reports for 24 months. Browsers that send Do Not Track or Global Privacy Control are skipped.
Your data
Use Support or support@piktoken.com for access, correction, closure or retention questions. Financial and security records may require retention for operational obligations. No specific retention period is represented as confirmed.