Overview
TokVault processes limited information needed to prepare and operate controlled web access.
Public production access is not open yet. Current processing is focused on account verification, password reset, entitlement checks, billing-boundary validation, security and support.
Information we process
TokVault may process account email addresses, authentication status, verification events, login and logout events, password reset activity and session-related events.
TokVault may process transactional email metadata, payment and entitlement status returned by server-side billing systems, support messages, security reports and technical logs needed for reliability and abuse prevention.
How we use information
TokVault uses information to verify accounts, deliver password reset flows, operate controlled access, check membership status, prevent abuse, investigate security issues and respond to support questions.
TokVault may maintain limited operational evidence needed for security, billing-boundary, support, audit and legal review.
Payment and media boundaries
Payment records and entitlement decisions are handled server-side. Browser state, redirects, invoice identifiers, checkout links, QR visibility and interface text are not proof of payment.
Web Premium and any iOS subscription are separate unless a future bridge is explicitly built, reviewed and announced.
Service providers
TokVault may use hosting, security, transactional email, payment infrastructure, repository hosting and operational support providers.
TokVault does not intentionally expose private provider link material, API keys, webhook secrets or signing material in browser code or public pages.
Retention and requests
TokVault keeps information only as long as needed for account operation, security, billing-boundary review, support, audit evidence and legal obligations.
Contact support@tokvault.app for access, correction, deletion, privacy or data questions. Do not send passwords, wallet seed phrases, private keys, private auth links, reset links, payment secrets or browser cookies in support messages.