Effective September 3, 2026

Privacy Policy

How Tong collects, uses, shares, protects, and retains information.

Information we collect

Tong collects account details such as email, display name, connected identity identifiers, policy acceptance, and security events. We process prompts, uploaded references, generated outputs, character profiles, settings, and library metadata to provide the Service. Wallet and transaction records include credit balances, quotes, reservations, ledger events, top-ups, provider references, and dispute status. We also receive device, browser, approximate network, and operational log data needed for security and reliability.

How we use information

We use information to authenticate users, provide generation and storage features, calculate and settle credits, process payments, provide support, prevent fraud and abuse, enforce policies, diagnose incidents, and comply with law. We do not sell personal information. Any use of Inputs or Outputs for model improvement must be separately disclosed and supported by provider contracts and user controls.

Service providers

We may share necessary information with infrastructure, storage, AI model, email, identity, analytics, fraud-prevention, and payment providers. Google may process sign-in data; Whop may process card checkout; NOWPayments may process crypto checkout. Providers process information under their own notices and our applicable agreements.

Retention and deletion

We retain account and content data while your account is active and as needed to provide features. You can delete library assets and request account deletion. Security, ledger, provider-event, audit, tax, dispute, and legal records may be retained for longer where reasonably necessary. Backup copies are removed on a rolling schedule unless preservation is required.

Your choices and rights

You may access and update profile data, manage active sessions, delete content, and request access, correction, export, restriction, objection, or deletion where applicable. Some rights depend on location and exceptions. Contact privacy@tong.ai. You may also complain to your local data-protection authority.

Security and international processing

Tong uses access controls, hashed passwords, opaque sessions, CSRF protection, transaction records, and provider-signature verification. No system is perfectly secure. Processing may occur in countries with different laws; where required we use recognized transfer safeguards.

Children and changes

Tong is not intended for anyone under 18, and we do not knowingly collect children’s data. We may update this notice as the product or law changes and will identify the effective date. Contact privacy@tong.ai with questions.