Data notice
Last updated: August 2026
This is the standalone notice required by India's Digital Personal Data Protection Act 2023. It says exactly what personal data we collect, what we do with it, and how to take your consent back. Nothing else is on this page on purpose.
Who is asking
TryTokka, operated by Samson PG under the Acsaven brand family. We are the Data Fiduciary for the personal data described below. Contact: privacy@trytokka.com.
What the service is
TryTokka reads how much you have spent on AI provider APIs and shows it in one dashboard, then emails you when a daily sync finds a spike or a threshold you set has been crossed. It reads billing and usage figures only. It never calls a completion endpoint, so it does not see your prompts or your model outputs, and there is nothing about them for us to store.
Exactly what we collect, and why
| Personal data | What it is used for | How long it is kept |
|---|---|---|
| Email address | To create and identify your account, send the spend alerts you configure, and reach you about billing. | While the account exists; purged within 30 days of deletion. |
| Password (hashed, never readable by us) | To let you sign in. Handled by Supabase Auth. | While the account exists. |
| Country code (2 letters, from network routing — not your IP, city, or precise location) | Tax and compliance handling, and fraud prevention. | While the account exists. |
| AI provider API keys, encrypted with AES-256-GCM | To read your spend from OpenAI, Anthropic, Google and OpenRouter. Decrypted only in server memory during a sync, then discarded. Never logged, never returned by any endpoint. | Until you disconnect the provider. |
| Your spend figures: provider, model, date, token counts, cost | To draw the dashboard and detect the spikes Scout emails you about. | While the account is active, so long-term trends survive. |
| Customer ID and subscription status from the payment processor | To know which plan you are on. We never see or store your card number. | While the account exists, plus any period tax law requires. |
| Key-access audit log: timestamp, provider, success or failure | Security monitoring. Visible to you in your own settings. | While the account exists. |
| Server logs including IP address and request time | Security monitoring and debugging. | 30 days. |
| Newsletter email address (only if you subscribe) | To send the Scout newsletter. Nothing else, and never shared. | Until you unsubscribe — one click, in every email. |
That is the whole list. We do not sell personal data, we do not use it for advertising, and we run no ad networks on this product.
Taking your consent back
Withdrawing is meant to be as easy as giving, so none of it requires emailing us and waiting:
- Provider keys — Settings → Connections, then disconnect. The encrypted key is deleted.
- The newsletter — the one-click unsubscribe link at the foot of every issue.
- The whole account — Settings → Account → Delete. Personal data is purged within 30 days, except records tax law requires us to keep.
Withdrawing consent stops future processing. It does not undo processing that already happened lawfully while consent was in place.
Your rights, and where to complain
You can ask for a copy of your data, correct it, have it erased, nominate someone to exercise these rights if you die or become incapacitated, and raise a grievance with us. The full list and the process are on the Privacy Policy; if the GDPR applies to you, see GDPR & your rights as well.
Email privacy@trytokka.com from your registered address. We answer grievances within 30 days. If we get it wrong, you may complain to the Data Protection Board of India.
Children
Accounts are for adults. You confirm you are 18 or over when you create one, and §10 of the Privacy Policy explains why we cannot answer the Act’s children’s provisions the way our free tools do.
This notice in your language
The Act gives you the option to read this notice in English or in any language in the Eighth Schedule to the Constitution. English is the version we publish and the one we can stand behind word for word. For any of the following, email privacy@trytokka.com naming the language and we will send you a translation:
Assamese · Bengali · Bodo · Dogri · Gujarati · Hindi · Kannada · Kashmiri · Konkani · Maithili · Malayalam · Manipuri · Marathi · Nepali · Odia · Punjabi · Sanskrit · Santali · Sindhi · Tamil · Telugu · Urdu
We serve translations on request rather than publishing twenty-two of them, because a legal notice machine-translated into a language nobody here reads is not something we would be willing to stand behind — and a notice you cannot rely on is worse than one you have to ask for.