TORKEN / Legal

Privacy policy

Last updated October 28, 2026

1. What this covers

This policy covers torken.ai, the public MCP endpoint at mcp.torken.ai, and the account and MCP setup pages on torken.ai. TORKEN is in preview; this policy will be updated as the service changes.

2. What we collect

Account data. Your email address, chosen handle, email confirmation status, and authentication session. Passwords are handled by Supabase Auth; we do not store plaintext passwords.
MCP connection data. The name of the client you connect, the scopes you approve, the grant date, and request metadata such as tool names, timestamps and status. The public catalog endpoint is read-only.
Usage and diagnostics. Pages viewed, links and controls used, approximate device and browser information, and error reports. We use PostHog for product analytics and Sentry for error reporting.
Support messages. Anything you send to andrew@torken.ai.

Do not put sensitive personal, customer or confidential information into an agent prompt. MCP requests are processed by your AI client and may be logged for reliability and security.

3. Cookies and local storage

We use cookies and local storage for sign-in sessions, security, and analytics. We do not use advertising cookies or sell personal data. You can clear these in your browser, but sign-in will stop working.

4. Why we use it

To create and secure your account and sign you in.
To provide catalog search, specs, CAD downloads and MCP access.
To understand which parts of the preview are used and improve them.
To diagnose errors, prevent abuse and protect the service.
To answer support requests and meet legal obligations.

5. Who we share with

We use service providers for authentication and database services (Supabase), hosting and storage (Cloudflare), product analytics (PostHog), and error reporting (Sentry). They process data on our behalf under their own terms. When you connect an AI client or open a design in a third-party CAD tool (for example SolidCraft or FreeCAD), that product handles the data you send it under its own policy. We do not sell personal data.

6. Retention

We keep account data while your account is open and for a reasonable period afterward for security and legal records. Analytics and error data are kept according to our providers' retention settings. Support messages are kept as long as needed to resolve the request.

7. Your choices

Depending on where you live, you may have rights to access, correct, export or delete your personal data, or to object to some processing. You can reset your password from your account, and you can ask us to delete your account at andrew@torken.ai. We may need to verify your identity before acting.

8. Security and transfers

We use reasonable technical and organizational measures, including encrypted connections and access controls. No service is perfectly secure. Our providers may process data in the United States, the European Union, or other countries where they operate.

9. Children

TORKEN is not directed to children under 16, and we do not knowingly collect their personal data. Contact us if you believe a child has created an account.

10. Changes and contact

We may update this policy as the preview evolves. The date above is the latest version. Questions or requests: andrew@torken.ai.