Privacy Policy
CTO is made by Token Coach, the trading name of an independent developer based in India ("we", "us"). This policy says what information we handle and why. The short version: the plugin analyses your usage on your own computer, and your sessions, prompts and code never reach us. We collect as little as we can, and we never sell it.
The plugin: stays on your computer
The plugin reads Claude Code's local session logs to measure usage and give advice. That analysis runs entirely on your machine. CTO keeps its own numbers (costs, token counts, which advice it gave; never prompt or code text) in ~/.claude/token-coach, a folder only your user account can open. Delete it any time, or run /token-coach:settings uninstall.
The plugin sends no telemetry. The only things it fetches or sends:
- Technique and price updates. Once a day it downloads small data files from our public GitHub repository. The request carries nothing about you or your usage. GitHub, as the host, sees the request's technical details (such as your IP address) under its own privacy statement. Turn it off with
/token-coach:settings sync off. - Citation checks, only when you ask. Checking whether the pages CTO cites still exist requests those pages. Nothing about you is sent.
- The weekly email, only if you set it up. It goes through your own email account to your own inbox. We never receive it.
- The outcome report. CTO never sends it. You can view exactly what it holds (counts and technique names, no content) and decide yourself whether to share it.
The connector (Pro)
When you sign in to the CTO connector, we keep:
- your email address and a sign-in record, to let you in;
- your subscription status (plan, active or not, renewal date), received from our payment provider.
When you ask the connector about a task, the text of that one request is processed in memory to produce the answer and is not stored. We do not keep a history of what you ask. Our host keeps short-lived technical logs (such as IP address and time of request) to run and protect the service.
Payments
Pro is sold by our merchant of record, a payment company that is the seller to you and handles payment and tax. It receives your payment details under its own privacy policy; we never see your card number. From it we receive your name, email address, country, plan and subscription status. We will name the provider here when Pro opens.
This website
tokencoach.dev sets no cookies. We count visits with Cloudflare Web Analytics, which does not use cookies or identify you. The site is hosted on Cloudflare, which processes technical request data (such as IP addresses) to serve and protect it. Fonts load from our own domain, not a font provider. If you join the Pro waitlist, we keep your email address only to tell you when Pro opens, and you can ask us to delete it at any time.
Email to us
If you write to hello@tokencoach.dev, we use your email address and message only to reply and help you.
Who processes data for us
- Cloudflare: hosting the website and connector, analytics, email routing.
- Our payment provider (merchant of record): payments, tax, invoices.
- GitHub: hosting the plugin's code and update files.
We do not sell or rent personal information, and we do not use it for advertising.
How long we keep it
- Account and subscription records: while your account is active, then for as long as Indian tax law requires us to keep financial records.
- Waitlist emails: until Pro opens or you ask us to delete them.
- Support emails: up to 2 years after the conversation ends.
Your rights
Wherever you live, you can ask us to show, correct, export or delete the personal information we hold about you, or object to a use of it. Email hello@tokencoach.dev and we will reply within 30 days. People in the EU and UK (GDPR), in US states with privacy laws, and in India (Digital Personal Data Protection Act) have these rights by law, and you can also complain to your local data-protection authority.
International transfers
We are based in India, and our providers may process information in other countries. Where the law requires it, transfers rely on the providers' standard contractual safeguards.
Children
CTO is for developers and is not meant for anyone under 18.
Changes
If we change this policy, we will update the date above; for changes that matter, we will tell subscribers by email before they apply.
Contact
If you need our full legal identity for a data-protection or legal request, email us and we will provide it.
Token Coach, India ยท hello@tokencoach.dev