Terms of use
Last updated: 3 September 2026
These terms govern access to and use of the TokenHawk service. Creating an account or issuing an API key constitutes unreserved acceptance of them.
Publisher and hosting
Publisher
- TokenHawk, published by Aittow
- Legal form: SAS
- Registered office: 58 rue de Monceau 75008 Paris, France
- Company registration (SIREN / RCS): 933 409 906
- EU VAT number: FR71 933 409 906
- Publication director: Mickaël de Azévédo
- Contact: contact@aittow.com
- Service: https://tokenhawk.aittow.com
Hosting provider
- Hosting provider name, address, phone number: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, phone: +352 26 73 33 00. Infrastructure deployed within the European Union.
Purpose of the service
TokenHawk is a proxy that sits between your agent and the language model provider you have chosen. Requests are sent to it instead of the provider's API; it forwards them after applying optimizations intended to reduce token consumption, along with the access and content controls you configure.
The service does not itself provide a language model, and does not replace your contract with your provider.
Beta status
The service is in beta. It may contain defects, change, be interrupted or modified without notice, and some features may be withdrawn.
The Free, Starter and Pro tiers are open. The Business and Enterprise tiers are not sold self-service and are the subject of a separate agreement.
No service level commitment — availability, restoration time, support — is given during the beta, including on paid tiers.
Account and authentication
Dashboard access uses Google authentication (OAuth 2.0). We neither receive nor store your Google password.
You are responsible for the use made of your account and for the confidentiality of your session.
The service is offered exclusively to professionals acting for purposes relating to their commercial, industrial, craft, professional or agricultural activity. It is not offered to consumers, nor to minors.
By creating an account and taking out a subscription, you declare that you are acting as a professional. We may ask you to evidence this and, failing that, refuse or close the account.
TokenHawk API keys
The "thawk_" keys you issue authenticate your traffic. They are shown once only, at creation: only their SHA-256 digest is stored, and we are technically unable to retrieve them for you.
You are responsible for keeping them safe. Any request bearing one of your keys is deemed to originate from you. If a key is compromised, revoke it from the "API keys" page.
The number of simultaneously active keys is capped by tier.
Your provider keys
The service runs on your own provider keys, entrusted to us so that it can call the API on your behalf. They are encrypted at rest (AES-256-GCM).
Your contractual relationship with your provider — terms, pricing, billing, limits — remains entirely yours. The consumption it bills you remains at your charge, including for calls the service issues at your request.
You warrant that you are authorised to use the keys you provide to us.
Transformation of your requests
The service modifies the content of the requests it forwards. Depending on the options enabled on each key: system prompt compression, conversation history summarisation, message reordering, injection of conciseness instructions, deduplication and truncation of tool definitions, masking or blocking of detected personal data.
A semantic cache may return a previously produced response for a question judged sufficiently similar, within your own account only. A response may therefore not result from a fresh call to your provider.
These transformations are designed to preserve meaning, and a compression that fails a similarity check is discarded. They nonetheless do not guarantee a result identical to that of a direct call: it is for you to validate that the service fits your use case, particularly where that use case is sensitive.
The access and content controls you configure apply to every request. Optimizations, by contrast, may be suspended — optimization quota exhausted, cache incident — without the service being interrupted.
Usage limits
A maximum rate (requests per minute) and a maximum number of concurrent calls apply according to your tier; exceeding them causes the request to be temporarily refused.
A monthly quota of optimized tokens also applies. It does not block your traffic: once reached, your requests continue to be forwarded to your provider, but without the optimizations.
The monthly dollar budget you set on a key is, by contrast, blocking: it is an instruction you have given.
The service may refuse a request in order to preserve infrastructure stability.
Subscriptions, prices and billing
The Free tier requires no subscription. The Starter and Pro tiers are obtained through a monthly subscription with no minimum term, taken out from the “Subscription” page.
Displayed prices exclude tax. Applicable value added tax is calculated and added at checkout, based on your country and, where relevant, your EU VAT number. A valid number declared by a business established in another member state results in the reverse charge.
Taking out a paid tier requires providing a valid tax identifier where the billing country provides for one; without it, payment cannot complete. This check is performed by Stripe and covers the form of the identifier; its validity with the relevant authorities is verified after payment.
Payment, invoicing and the storage of payment methods are operated by Stripe. No card data passes through or is stored on our servers. Your invoices are available from the billing portal, reachable through “Manage subscription”.
The subscription is charged on sign-up and then at each monthly renewal, by tacit renewal, until cancelled.
An upgrade takes effect immediately; the difference is charged pro rata for the days remaining in the current period. A downgrade and a cancellation take effect at the end of the current period: the tier you paid for stays active until then, and no pro rata refund is made for the period already started.
If a payment fails, access to the tier is maintained while Stripe retries collection. The account moves to the Free tier once the subscription is definitively closed.
Prices may change. Any change is notified to you before it applies and takes effect only at the following renewal; you may cancel before then.
Acceptable use
You undertake not to:
- circumvent the service's limits, access controls or metering mechanisms;
- use the service for unlawful processing, or to produce content infringing third-party rights;
- transmit data for which you do not hold the necessary rights or legal basis;
- attempt to access another account's data, or to probe the security of the service without prior written authorisation;
- resell or redistribute access to the service;
- impair the availability of the service or that of its providers.
Failure to comply with these rules may result in immediate suspension of the keys concerned or of the account.
Availability and changes
The service is accessible without any availability commitment. Interruptions for maintenance, updates or incidents may occur without notice.
We may change, restrict or withdraw any feature during the beta.
Intellectual property
The service, its brand, its interface and its code remain the property of the publisher. No licence is granted beyond the right to use the service in accordance with these terms.
You retain all rights in the content you transmit and in the responses you receive. We do not use your content to train a model.
Liability
The service is provided “as is”. No service level commitment is given, including on paid tiers.
The publisher cannot be held liable for indirect consequences of using the service, in particular loss of business, loss of data, overconsumption billed by your provider, or a decision taken on the basis of an answer obtained through the service.
In any event, the publisher's liability under these terms is limited to the amounts you have actually paid to it during the twelve months preceding the triggering event.
Nothing in these terms operates to exclude or limit liability which cannot lawfully be excluded or limited.
Term, suspension and termination
These terms apply for as long as you hold an account.
You may cancel your subscription at any time from the billing portal. Cancellation takes effect at the end of the period already paid for, after which the account returns to the Free tier; amounts paid for the current period are not refunded.
You may stop using the service at any time, revoke your keys and request deletion of your account at contact@aittow.com. Deleting the account cancels any subscription in force.
We may suspend or close an account in the event of a breach of these terms, use that harms the service, non-payment, or a legal obligation.
Personal data
The processing of personal data is described in the privacy policy, which forms an integral part of these terms.
Changes to these terms
These terms may be amended. The applicable version is the one published on this page. In the event of a substantial change, you will be informed by email or from the dashboard.
Governing law and disputes
These terms are governed by French law.
In the event of a dispute, an amicable resolution will first be sought in writing at contact@aittow.com. Failing agreement, the dispute falls to the courts having jurisdiction under ordinary law.