1. Controller
Benjamin Gleue, Eitel-Fritz-Str. 2, 14129 Berlin, Germany.
Data protection requests can be sent by post to this address. A business email address for data protection matters must be added before publication.
2. Providing the website
When the site is opened, technically required connection data is processed, in particular IP address, time, requested address, and device and browser information. Processing serves the secure and stable provision of the site as well as error analysis, on the basis of Article 6(1)(f) GDPR. Technical logs are stored only for as long as is necessary for security and troubleshooting.
3. Account and sign-in
On registration and sign-in we process in particular your email address, account identifier and authentication data. This is necessary to perform the usage relationship under Article 6(1)(b) GDPR. Signing in with Google is optional; in that case the account data required for sign-in is transmitted between Google and our authentication service.
4. Product features
We store settings and content that you create yourself, including alert rules, notification channels, briefing settings, onboarding answers, community posts, reports, and support and feedback messages. If you join the Pro waitlist we store your email address, the confirmed price, the time of consent, and technical data used to prevent abuse. Joining is non-binding and serves to measure product interest and to inform you when Pro launches.
Processing takes place to carry out pre-contractual measures under Article 6(1)(b) GDPR, on the basis of your consent under Article 6(1)(a) GDPR, and to improve and secure the service under Article 6(1)(f) GDPR. Consent can be withdrawn at any time with effect for the future.
At your request, alerts can be sent to external services you have connected, such as email, Slack, Discord, PagerDuty, Opsgenie or GitHub. The privacy policies of the respective provider apply additionally to their processing.
5. AI-supported support
Entries in the support chat are processed to answer questions and to record requested features. For this purpose, content may be sent to an AI service to generate answers. Do not enter credentials, payment details or other sensitive information there. The legal basis is Article 6(1)(b) and (f) GDPR.
6. External market and operations data
Token Terminal retrieves public model, price and status data from external providers. This data generally does not relate to individual users. When you open an external provider link, which is labelled as advertising, you leave Token Terminal; the target provider processes the request on its own responsibility. Token Terminal may receive compensation for such referrals.
7. Local storage and technically necessary cookies
We use technically necessary storage mechanisms, in particular for sign-in, session management and anonymous support conversations. These are required to provide the features you have explicitly requested. Non-essential advertising or profiling cookies are not currently used.
8. Recipients and transfers to third countries
For technical provision we use processors for hosting, authentication, database operation and AI features. Depending on the notification channel you choose, further recipients determined by the user are added. Where data is processed outside the European Economic Area, this happens on the basis of an adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses. The concrete provider list and their locations must be finally reviewed and added here before publication.
9. Storage duration
Account data and user-related content are generally stored for the duration of the usage relationship. You can delete individual content within the provided features. Support, security and evidence data are deleted once the respective purpose no longer applies and no statutory retention obligations stand in the way. Concrete deletion periods must be finally defined before publication.
10. Your rights
Under the GDPR you have the right to information, rectification, erasure, restriction of processing, data portability and objection. Given consent can be withdrawn at any time with effect for the future. You may also lodge a complaint with a data protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information.
11. Obligation to provide data
The data requested for account, sign-in and explicitly chosen features is required to provide them. Without this information the respective features cannot be used. No solely automated decision-making producing legal effects or similarly significant effects takes place.