Privacy Policy
This policy explains what BIEL LLC ("we") collects when you use TOKVPN, why, and what we do with it. We collect what we need to bill you and run your connection, we don't sell anything, and we don't watch what you do online.
1. What we collect
- Email address. Collected by Stripe at checkout and used to create your account, send your sign-in links and contact you about your subscription. When you buy, a hashed (irreversibly scrambled) version of your email is also shared with Reddit so the purchase can be attributed to our ads.
- Payment details. Handled entirely by Stripe. We only receive your subscription status; we never see your card number. See Stripe's privacy policy.
- Service data. Which connection is assigned to you, your connection key, and your subscription status.
- Technical logs. Our servers keep short-lived technical logs (such as connection events and errors) needed to keep the Service running and to diagnose problems. They are rotated automatically and are not used to build a profile of your activity.
2. What we don't do
- We do not sell or rent your personal data, and we do not share it with data brokers.
- We do not inspect the content of your traffic.
- We do not measure anything inside your VPN connection. The analytics and ad measurement described in sections 3 and 4 cover the tokvpn.app website only, and are never linked to your traffic.
3. Who we share data with
Only the providers we need to run the Service and to measure our ads:
- Stripe — payments.
- Our email delivery provider — sign-in links and account emails.
- Google — Google Analytics records page views and button clicks on this site, reported as aggregated site usage. Google Ads measures which ad brought you here, and when you come back from Stripe after paying, the dashboard page tells Google Ads and Google Analytics that a purchase happened, with the checkout reference number. No email address and no payment details are sent. See Google's privacy policy.
- Reddit — ad measurement: page visits, button clicks, and purchases as a hashed email that cannot be reversed. See Reddit's privacy policy.
- Our hosting provider and the network provider that supplies the home internet connections.
Each receives only what is needed for its role. We do not sell this data. We disclose data to authorities only when legally required.
4. Cookies and your choice
The only cookie we set ourselves for the Service is the one that keeps you signed in to your dashboard.
On your first visit a banner asks you to Accept or Decline the analytics and ad cookies described above. Your answer is stored in a cookie we set ourselves, named tok_consent, for 180 days.
If you accept, Google and Reddit may set their own cookies. If you decline, the Reddit pixel is not loaded at all, and the Google tags run in cookieless mode: they count the visit without storing anything on your device and without recognizing you across sites.
To change your answer, delete the tok_consent cookie or clear this site's data in your browser. The banner will ask again on your next visit.
5. How long we keep it
Account and billing records are kept for as long as you have an account and afterwards as long as tax and accounting law requires. Technical logs are kept for a short period and deleted automatically.
6. Your rights
You can ask us to show, correct or delete the personal data we hold about you, or to close your account, by emailing hello@biel.llc. We answer within 30 days.
7. Security
All traffic between your device and our servers is encrypted. Sign-in links expire and can be used once. Access to our systems is restricted to the people who operate the Service.
8. Changes
If we change this policy in a meaningful way, we'll post the new version here with a new effective date.
9. Contact
BIEL LLC
2093 Philadelphia Pike #9239, Claymont, DE 19703
hello@biel.llc