Privacy Policy

Tokenando (“we”, “us”) operates tokenando.ai and acts as the data controller for the personal data described in this policy. We comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR. Questions, requests, or complaints can be sent to privacy@tokenando.ai.

1. Information we collect

We only collect information you actively provide:

• Email address: when you subscribe to The Compute, join the waiting list, or register your firm in the Directory.
• Name and company: optional fields on the subscription and Directory forms.
• Message content: anything you send us in a form or reply.

We also collect minimal technical data automatically (IP address, browser type, referrer) through standard web server logs to keep the site running and secure. We do not build behavioural profiles, run advertising trackers, or sell data to third parties.

2. How we use it and our legal basis

• Consent (Art. 6(1)(a) GDPR): to send The Compute and waiting-list updates you signed up for. You can withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): to operate, secure, and improve the site, prevent abuse, and respond to enquiries. Where we rely on legitimate interests, we balance them against your rights.
• Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable laws and respond to lawful requests.

We do not sell your data, run advertising cookies, or share it with advertisers.

3. Who processes your data

We use carefully selected sub-processors. They act strictly on our documented instructions, under data processing agreements:

• Resend (US, EU): email delivery for subscriber emails, confirmations, and admin notifications.
• Vercel (US): website hosting, edge delivery, and server logs.
• Sanity (EU/US): content management for editorial.

Where personal data is transferred outside the EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and equivalent UK transfer mechanisms.

4. Retention

We keep subscriber records for as long as you remain subscribed, and for up to 24 months after you unsubscribe in case of disputes or legal obligations, after which they are deleted or anonymised. Server logs are kept for up to 30 days. You can request earlier deletion by emailing privacy@tokenando.ai or by replying “unsubscribe” to any email.

5. Your rights

If you are in the EEA, UK, Switzerland, or California, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data (the “right to be forgotten”).
• Restrict or object to processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your supervisory authority (for example, the CNIL in France, the ICO in the UK, or your local DPA).

To exercise any of these rights, email privacy@tokenando.ai. We respond within 30 days, in line with GDPR Art. 12.

6. Security

We apply reasonable technical and organisational measures to protect your information, including HTTPS, access controls on subscriber data, and least-privilege provisioning across our sub-processors. No online service is perfectly secure, so please use strong, unique passwords and be cautious with links.

7. Children

Tokenando is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with information, please contact us and we will delete it.

8. Changes

We may update this policy from time to time. When we do, we will update the date at the top. Material changes will be communicated to subscribers by email and announced on the site.