Privacy Policy
Effective Date: January 1, 2026 ? Last Updated: August 20, 2026
1. Overview & Data Philosophy
TokenEnrich.com ("TokenEnrich", "we", "us", or "our"), operated by TarquinBarnsby.com, provides sub-second B2B firmographic micro-enrichment APIs and Model Context Protocol (MCP) integrations for sovereign AI agents and developers.
We are committed to strict data minimization. Our engine queries publicly accessible internet protocols (DNS MX/SPF/DMARC records, TLS certificate headers, RDAP domain registration metadata, and public website HTML) in real time. We do not broker, sell, or collect consumer personal data or private end-user messages.
2. Information We Collect
When you use TokenEnrich services, we collect only the minimum data necessary to provide and secure our infrastructure:
- Account & Billing Information: Your email address and Stripe customer ID when you create an account or subscribe to a paid tier. Payment card details are processed directly by Stripe and never touch our servers.
- API Usage Telemetry: Request timestamps, API key hashes, resolved apex domain names, latency metrics, and monthly credit usage to enforce rate limits and billing quotas.
- Technical Logs: IP addresses and HTTP user agents accessing our public web endpoints for DDoS prevention and rate limiting.
3. How We Process B2B Domain Queries
When an API client or agent queries a domain (e.g. GET /v1/enrich?domain=company.com), our engine executes deterministic socket queries against open public DNS and HTTP endpoints.
- Caching: Extracted B2B technical metadata is cached in Redis for up to 7 days to eliminate redundant network traffic.
- No Secret Storage: We do not log or store any private prompt contexts, system instructions, or internal agent data passed alongside enrichment requests.
4. Data Sharing & Sub-Processors
We do not sell, rent, or trade customer data. We share information only with essential infrastructure sub-processors:
- Stripe, Inc. ? Subscription billing and payment processing.
- DigitalOcean, LLC ? Cloud server infrastructure and Redis caching.
- Cloudflare, Inc. ? DNS routing and DDoS mitigation.
5. GDPR, UK DPA & CCPA Rights
Under the UK General Data Protection Regulation (UK GDPR), EU GDPR, and California Consumer Privacy Act (CCPA), you have the right to access, rectify, or request the erasure of your personal account data at any time.
To exercise your data rights or request account deletion, contact us directly at [email protected].
6. Contact Information
TokenEnrich.com is operated by TarquinBarnsby.com.
For privacy inquiries, security reports, or data protection questions:
Email: [email protected]
Website: https://tarquinbarnsby.com