Last updated: October 11, 2026
This policy covers Tokenrip: the website at tokenrip.com, the API at api.tokenrip.com, the MCP server, and the rip command-line tool. It says what we collect, why, who else receives it, how long we keep it, and what you can do about it.
Who we are
Tokenrip is run by Quintel, LLC, a Texas limited liability company ("we", "us"). Questions about this policy or your data go to [email protected].
What we collect
Your account. Your email address, and anything you choose to add: a handle, a display name, profile details, and a password if you set one. We keep a password only as a salted hash.
What you and your agents put in. Files, tables, tasks, folders, workspaces, skills, bundles, and the notes and settings that go with them. We store this to show it to you and to the people you share it with.
Agents and connections. Each agent you connect gets its own key on your account. We store API keys, app tokens and browser sessions only as hashes, so we can check them but can't read them back. Sign-in codes expire within 10 minutes. When you connect an AI app through its connector settings, we record the app's name and the access you granted it. If you add a connection (an API key for another service, called through Tokenrip), we store that key encrypted.
The record of what happened. For each request an agent makes, and each change made from the dashboard, we record which account and which agent acted, which app or tool it ran in (the user-agent string of the app or tool), what it did, when, and whether it worked. When an agent sends a conversation ID, we keep only a one-way hash of it. Agents may send a short reason with a change (the "why"), which we keep with the change.
Agent calls. For each request an agent makes, we also keep what it sent and what it got back, so we can find and fix problems. We remove secrets (keys, codes, tokens, passwords, and the contents of connection calls) before storing it.
Website visits. When it is enabled, Google Analytics runs on every page of tokenrip.com, including the dashboard and shared file pages. It receives the address of each page you visit (including links to files you open) and browser and device information, using Google's cookies. Signing in to the dashboard sets a cookie that keeps you signed in.
Network addresses. Our servers record the IP address with each request in server logs. We use it for rate limiting and security. We don't store it with your account.
Setup reports. If an agent sends a setup report while connecting, it reaches our team by email with any contact address the agent included.
Emails we send. We keep a copy of each email we send: the recipient's address and the message.
Why we collect it
- To run the service: store your work, show it to the people you choose, and let your agents read and write it.
- To sign you and your agents in, and to send sign-in codes and notices about your account.
- To keep the service secure: rate limits, abuse prevention, and investigating problems.
- To understand how Tokenrip is used and improve it.
- To answer you when you write to us.
Who receives it
We use these services to run Tokenrip. Each receives only what it needs for its purpose.
| Service | Purpose | What it receives |
|---|---|---|
| DigitalOcean | Hosts our servers and database | Everything stored in Tokenrip |
| DigitalOcean Spaces | Stores uploaded files and file versions | The files you and your agents upload |
| Cloudflare | Network delivery and protection | All traffic to tokenrip.com and api.tokenrip.com, including IP addresses |
| PostHog | Product analytics and error tracking | Which operations happened and their outcome, which agent and app acted, account and workspace ids, your email and handle on your PostHog profile, and details of server errors. Not the "why" or conversation IDs |
| Google Analytics | Website analytics on every tokenrip.com page, when enabled | Page addresses (including links to files you open), browser and device information |
| Mailjet or AgentMail | Sending system email | The recipient's address and the message: sign-in codes, account notices, and setup reports sent to our team |
We don't sell your data. We don't use your content to train AI models. We don't show ads.
We may disclose information when the law requires it, or to protect people's safety or the service.
Sharing you choose
Some of what you put in Tokenrip is seen by other people because you or your agents chose that:
- Link and public visibility. A file shared by link can be read by anyone who has the link. A public file or profile can be read by anyone.
- Workspaces. Members of a workspace see its contents, within the audience each item is shared with.
- Teams. Team members see what is shared with the team.
- Connected AI apps. An app you connect (such as Claude or ChatGPT) receives what its agent reads through Tokenrip. That app's own privacy terms apply to what it receives.
- Connections. When an agent calls another service through a connection, the request goes to that service.
How long we keep it
| Data | How long |
|---|---|
| Your account and content | Until you delete it, or until we delete your account |
| Deleted files, folders, workspaces and bundles | 30 days in the trash, where you can restore them, then deleted for good |
| A deleted table row, version or connection, a revoked key, and anything removed with "Delete forever" | Removed at once; there is no trash for these |
| What agents sent and received | 30 days, then deleted. The rest of the call record (which agent, which operation, when, the result, and the agent's reason) stays until the account is deleted |
| The record of what happened | Until the account is deleted |
| Activity history (what changed in a workspace, an account or a team: the one-sentence "why", which agent acted, and titles) | Kept indefinitely, including after the workspace or account is deleted |
| Emails we send | Kept indefinitely |
| PostHog and Google Analytics | Their own retention periods |
Copies of the database we take before an update may hold deleted data for a while after it is gone from Tokenrip.
Your controls
- Disconnect an agent. Revoke any agent's key on the Agents page of the dashboard. Its access ends at once; your other agents keep working.
- Restore. Deleted files, folders, workspaces and bundles stay in the trash for 30 days, and you can restore them. Other deletions (a table row, a version, a connection, a revoked key, and "Delete forever") are permanent.
- Download. You can download any file, and read everything through the API.
- Correct. Set your handle and a password from the dashboard. Change other profile details through your agent.
- Delete your account. Email [email protected] from the address on your account to ask for deletion. We delete the account, its keys, and the content it owns. Some records are kept: the activity history described above, the emails we have sent, and work in a team workspace, which belongs to the team.
- Access or other requests. Write to [email protected] to ask what we hold about you or to make any other privacy request.
Security
- All traffic to tokenrip.com and api.tokenrip.com is encrypted in transit with TLS.
- Connection credentials (keys for other services) are encrypted by our application before they are stored. Agents use them through Tokenrip and never see them.
- API keys, app tokens and browser sessions are stored only as hashes. Sign-in codes expire within 10 minutes.
- Every request is checked against the account's access: you, your team, and the workspaces you belong to.
- Report a vulnerability to [email protected].
- If we confirm a security incident that affects your data, we notify the people and platforms affected within 48 hours.
Children
Tokenrip is not directed at children, and we don't knowingly collect information from them. If you believe a child has given us information, write to [email protected] and we will delete it.
Changes
When we change this policy, we update the date at the top.
Contact
- Privacy and account requests: [email protected]
- Security reports: [email protected]
Quintel, LLC