Privacy Policy
This policy explains what BIEL LLC ("we") collects when you use TOKVPN, why, and what we do with it. We collect what we need to bill you and run your connection, and we don't sell anything.
1. What we collect
- Email address. Collected by Stripe at checkout and used to create your account, send your sign-in links and contact you about your subscription. When you buy, a hashed (irreversibly scrambled) version of your email is also shared with Reddit so the purchase can be attributed to our ads.
- Payment details. Handled entirely by Stripe. We only receive your subscription status; we never see your card number. See Stripe's privacy policy.
- Service data. Which IP addresses are assigned to you and since when, your connection key, and your subscription status.
- Connection history. The IP addresses you connect to us from, with the date, the time of your first and last connection that day, and the assigned IP you used. We keep it to answer abuse reports and legal requests.
- Technical logs. Our servers keep technical logs needed to keep the Service running, prevent abuse and diagnose problems: the time of each connection, the IP address you connect from, errors, and the names of the websites and apps your connection reaches (for example, "tiktok.com"), never the pages you open or what you send. Only the people who operate the Service can see them.
2. What we don't do
- We do not sell or rent your personal data, and we do not share it with data brokers.
- We do not inspect the content of your traffic.
- We do not measure anything inside your VPN connection. The analytics and ad measurement described in sections 3 and 4 cover the tokvpn.app website only, and are never linked to your traffic.
3. Who we share data with
Only the providers we need to run the Service and to measure our ads:
- Stripe — payments.
- Our email delivery provider — sign-in links and account emails.
- Google — Google Analytics records page views and button clicks on this site, reported as aggregated site usage. Google Ads measures which ad brought you here, and when you come back from Stripe after paying, the dashboard page tells Google Ads and Google Analytics that a purchase happened, with the checkout reference number. No email address and no payment details are sent. See Google's privacy policy.
- Reddit — ad measurement: page visits, button clicks, and purchases as a hashed email that cannot be reversed. See Reddit's privacy policy.
- Our hosting provider and the network provider that supplies the home internet connections.
Each receives only what is needed for its role. We do not sell this data. We disclose data to authorities only when legally required.
4. Cookies and your choice
The only cookie we set ourselves for the Service is the one that keeps you signed in to your dashboard.
On your first visit a banner asks you to Accept or Decline the analytics and ad cookies described above. Your answer is stored in a cookie we set ourselves, named tok_consent, for 180 days.
If you accept, Google and Reddit may set their own cookies. If you decline, the Reddit pixel is not loaded at all, and the Google tags run in cookieless mode: they count the visit without storing anything on your device and without recognizing you across sites.
To change your answer, delete the tok_consent cookie or clear this site's data in your browser. The banner will ask again on your next visit.
5. How long we keep it
Account and billing records, including the IP addresses assigned to you and your connection history, are kept for as long as you have an account and afterwards as long as tax and accounting law requires. Technical logs, including website names, are deleted automatically within 90 days, unless we must keep a specific record longer to handle an abuse report or a legal request.
6. Your rights
You can ask us to show, correct or delete the personal data we hold about you, or to close your account, by emailing hello@biel.llc. We answer within 30 days.
7. Security
All traffic between your device and our servers is encrypted. Sign-in links expire and can be used once. Access to our systems is restricted to the people who operate the Service.
8. Changes
If we change this policy in a meaningful way, we'll post the new version here with a new effective date.
9. Contact
BIEL LLC
2093 Philadelphia Pike #9239, Claymont, DE 19703
hello@biel.llc