Privacy notice

Version 2026-10-23. This notice covers the free Tokino account, the business you set up in it, and visits to tokino.ai.

What we keep for your account

Your email address, to identify your account and notify you when your first report is ready, while report email is enabled.
Your password, stored only as a salted hash. We cannot read it.
When you created the account, and the source of the visit that led to it, such as direct or a search engine.
A session record while you are signed in: a random token, when it began and when it ends.
We keep no IP address or browser details with your session.

What you enter in business setup: the business name, other names it goes by, its website, its city, its trade and the questions you track.
Each scan of your business: the questions asked, the AI answers sampled with the sources they cite, whether they name your business or cite your website, and when and what each answer cost us.
Your first report's scan and availability time, to show your baseline and measure time from signup to first value.
A delivery record for report email: its status and message identifier, without the address or message content.
We need none of your Google Business Profile, website access or job software, and ask for none.

Each visit is one record: a source label and the time it began. It holds no name, email, IP address, page address or device detail.
The source label comes from the website that sent you, such as a search engine or an AI assistant. We keep the label only, never the address you came from.
A visit cookie holds the source label and the time the visit ends, signed so it cannot be changed. It expires after 30 minutes.

A visit cookie, described above. It lasts 30 minutes.
A session cookie while you are signed in. It ends when you sign out, delete your account, or after 7 days.
Signing out ends all signed-in sessions for your account. If it cannot finish, we show an error so you can retry.
We use no advertising or third-party tracking cookies.

We use this data to run your account, keep it secure, and count visits and sign-ups by source.
To limit abuse, our server counts attempts to sign up, sign in or delete an account by IP address, in memory for one minute. It never stores the address.
A separate signup limit keeps only the UTC hour and attempt count. It contains no account or visitor identifier.
We use your business details to measure how often AI assistants name your business when asked about your trade in your city.
An answer-sampling provider asks the AI assistants for us. It gets only each question, with your trade and city. It never gets your business name, website or email.
Our hosting and database providers process this data for us. We do not sell it or share it for advertising.
When report email is enabled, our email provider receives your address and a message linking your private account report, without sampled answers.

Your account data stays until you delete your account.
Deleting your account from your account page removes at once your email, password hash, sessions, the source of your sign-up, your business details and every scan of your business.
Deletion also removes your first-report time and our report-email delivery records.
We retain visit records and signup sources for 13 completed UTC weeks and the current week, then remove them.
Expired sessions and earlier signup attempt counts are removed too. Cleanup runs on account activity and every five minutes on the live service.