Privacy Policy

1. Controller

Controller: Prime Tokens, not provided. Privacy officer/contact: contact@primetokens.store.

2. Data we process

• Registration and purchase: name, email, buyer identifier and order data received from the marketplace.
• Access: IP address, device identifier, browser, access date and time, sessions and login attempts.
• API usage: requested model, address used, token count, latency, request status and estimated cost.
• Support: messages and information you send us.

We do not request sensitive data and do not store full conversation content by default. Technical metadata may be retained for security, metering and legal compliance.

3. Purposes and legal bases

• Perform the contract and deliver the purchased access (performance of contract).
• Measure usage, bill and prevent fraud (performance of contract and legitimate interest).
• Comply with tax, regulatory and court obligations (legal obligation).
• Send operational, security and usage notices (performance of contract and legitimate interest).
• Improve the service and respond to requests (legitimate interest or consent, where required).

4. Sharing

We share the minimum necessary with: the originating marketplace (GGMAX or another), infrastructure and AI model providers, the transactional email provider, payment services and authorities when legally required. We do not sell personal data.

International transfers may occur to cloud and model providers located outside Brazil, with contractual safeguards and applicable legal bases.

5. Retention

We retain order and tax data for the legal period. Request logs are retained for up to 180 days; IP events for up to 90 days; security and audit records may be retained longer when necessary to prevent fraud or comply with obligations. After the period, data is deleted or anonymized.

6. Your rights

You may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing and withdrawal of consent. Send requests to contact@primetokens.store. We will respond within the legal deadlines and may confirm your identity before complying.

7. Security

We use encryption for credentials, access control, audit logging, attempt limiting, expiring sessions and monitoring. No system is entirely immune to incidents; in the event of a relevant incident, we will notify data subjects and the ANPD as required by law.

8. Cookies

The dashboard uses strictly necessary cookies to maintain the authenticated session. We do not use advertising cookies. You can block cookies in your browser, but this will prevent access to the dashboard.

9. Changes and contact

We may update this policy. The current version will be on this page. Questions: contact@primetokens.store.