Privacy Policy

TokenPig (“we”, “us”) turns documents into clean, token-efficient Markdown. This policy explains what we collect, why, and how we handle it. We built the product to keep data collection to a minimum.

Your documents

The single most important point: we do not store the documents you upload. Each file is processed in memory (or a temporary file that is deleted before the response returns), converted to Markdown, and then discarded. Your documents are neversaved to a database, retained for analytics, or used to train any model. Conversion runs on our own servers using Microsoft's MarkItDown library — file contents are not sent to third-party AI providers.

Account data

If you create an account, we store your email address. Sign-in is passwordless (a “magic link” sent to your email), so we never handle or store a password. Authentication and account storage are provided by Supabase.

Usage data

• Conversion counts. We keep a monthly counter per account to enforce plan limits. We do not keep the contents or names of converted files.
• Anonymous trial. Before you sign up you get a few free conversions. To count them we set a random identifier in a cookie (tp_anon) and store a hashed (non-reversible) form of your IP address purely to limit abuse.

Payments

Subscriptions are sold through Lemon Squeezy, our merchant of record. Lemon Squeezy collects and processes your payment details on their secure checkout — TokenPig never sees or stores your card information— and handles invoices, VAT/sales tax and receipts. We store only your subscription status and a customer/subscription identifier so we can grant the right plan. Lemon Squeezy's own privacy policy governs the payment data they hold.

Cookies & local storage

• tp_anon — counts anonymous free conversions.
• tokenpig-theme and tokenpig-lang — remember your theme and language.
• Your Supabase auth session is kept in your browser's local storage to keep you signed in.

We do not use advertising or cross-site tracking cookies.

Processors we rely on

• Supabase — authentication and account/usage database.
• Lemon Squeezy — payments and subscription management.
• Vercel — application hosting and the conversion function.

Retention

Documents are not retained. Account and usage data are kept while your account is active. If you delete your account, we remove your profile and usage records; billing records held by Lemon Squeezy are governed by their retention rules.

Your rights

You can request access to, correction of, or deletion of your account data, and you can cancel your subscription at any time. Contact us at privacy@tokenpig.com.

Children

TokenPig is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; we'll revise the “last updated” date above and, for material changes, notify account holders by email.

Contact

Questions? Email privacy@tokenpig.com.