Privacy

What this product is

tokensto.cash is a seller front door for Surplus Intelligence, with cash-out on usdctofiat rails. It is a sister of usdctofiat.xyz. We do not take custody of your USDC or your provider key.

What we collect

• Wallet address and session from Privy when you sign in.
• Email address, when your Privy account has one, plus your operational email preference.
• Listing metadata we store so the dashboard can show your offers (model, caps, pricing safeguards, Surplus offer ids). Not the provider key.
• Cash-out order records you create here.
• Lifecycle notifications and whether you read them.
• Seller milestone timestamps, such as first request, first dollar, payout, and completed cash-out.
• On-chain reads of USDC transfers to your payout wallet, so we can show earnings from Surplus relayers.
• Coarse product events and ranges, such as a provider catalog id, model count, or budget range. These events do not include your wallet, email, provider key, model names, or a custom provider URL.
• One-way seller and payout-recipient fingerprints with cumulative payout totals, used only to deduplicate the aggregate weekly count of sellers whose earnings increased.
• Whatever you send to gm@galleonlabs.io.

What we do not keep

The provider API key is sent once to Surplus Intelligence. Surplus probes it and stores it encrypted per listing. This app does not persist the key.

Who else sees data

• Surplus Intelligence — key probe, encrypted key storage, offer book, earnings accrual, and batched settlement.
• Privy — sign-in and the embedded or connected wallet.
• usdctofiat / Peer cash-out — when you create a cash-out to a live rail.
• Vercel, Firebase/Firestore, and Alchemy — hosting, app state, and chain reads.
• Resend — your email address and operational message content, only if operational email delivery is enabled.

We do not sell your data. We do not use it for advertising.

Notifications

The in-app inbox is the durable record. Operational emails are limited to events that need attention, such as a persistently failing key, first payout, or cash-out outcome. You can turn email off in Settings; we do not send marketing email through this preference.

Rights

Email gm@galleonlabs.io to ask what we hold, or to ask us to delete account records we control. We cannot edit the public chain or Surplus's own encrypted key store. Do not send a provider key to support.