Privacy

What this product is

tokensto.cash is a seller front door for Surplus Intelligence, with cash-out on usdctofiat rails. It is a sister of usdctofiat.xyz. We do not take custody of your USDC or your provider key.

What we collect

• Wallet address and session from Privy when you sign in.
• Listing metadata we store so the dashboard can show your offers (model, caps, cost basis, Surplus offer ids). Not the provider key.
• Cash-out order records you create here.
• On-chain reads of USDC transfers to your payout wallet, so we can show earnings from Surplus relayers.
• Whatever you send to gm@galleonlabs.io.

What we do not keep

The provider API key is sent once to Surplus Intelligence. Surplus probes it and stores it encrypted per listing. This app does not persist the key.

Who else sees data

• Surplus Intelligence — key probe, encrypted key storage, offer book, per-request settlement.
• Privy — sign-in and the embedded or connected wallet.
• usdctofiat / Peer cash-out — when you create a cash-out to a live rail.
• Vercel, Firebase/Firestore, and Alchemy — hosting, app state, and chain reads.

We do not sell your data. We do not use it for advertising.

Rights

Email gm@galleonlabs.io to ask what we hold, or to ask us to delete account records we control. We cannot edit the public chain or Surplus's own encrypted key store. Do not send a provider key to support.