Terms of use

These terms of use (the “Terms”) govern access to and use of the TokenSaver platform (the “Platform”), published by TOKENSAVER, a French simplified joint-stock company (SAS) with a share capital of €5,000, registered with the Aix-en-Provence Trade and Companies Register under number 130 897 564, registered office Espace Beauvalle, Bâtiment A, 2 rue Mahatma Gandhi, 13090 Aix-en-Provence, France (“TokenSaver”).

The Platform sits between the Customer’s AI applications and agents and large language model (“LLM”) providers to route, observe, optimize, govern and secure their traffic. It includes the Control Plane, with the web console and administration APIs, the Data Plane, the code editor extension (VS Code / Cursor) and related services (the “Services”). It is offered in SaaS, hybrid or self-hosted mode depending on the plan.

The Services are intended exclusively for professionals acting for business purposes. By accepting the Terms, the Customer declares it acts as a professional; consumer withdrawal and mediation rules therefore do not apply.

An Enterprise agreement, order form or signed quote prevails over the Terms on the points it expressly covers.

• “Customer”: the legal entity or professional that creates an account and subscribes to the Services.
• “User”: any person authorized by the Customer to access the Services under its account.
• “Customer Data”: data sent by the Customer or its Users through the Services, including prompts, responses, files, RAG documents, call metadata and logs.
• “Third-Party Provider”: any AI model or service provider (for example Anthropic, OpenAI, Mistral, Google) to which the Platform routes the Customer’s requests.
• “Provider Key”: the API key or subscription the Customer holds directly with a Third-Party Provider (“BYOK” or “Keep my Claude” mode).
• “Control Plane”: the part of the Platform that administers accounts, virtual keys, policies, the model catalogue and cost tracking, and that includes the web console.
• “Data Plane” or “Gateway”: the gateway that processes the Customer’s requests to Third-Party Providers and applies its rules. It is distributed under an open-source license and may be operated by TokenSaver or by the Customer on its own infrastructure.

The Terms are accepted when the account is created, by ticking a box, or by signing a quote or agreement. They are available at any time on www.tokensaver.cloud.

TokenSaver may update the Terms. Any material change is notified at least thirty (30) days before it takes effect. A Customer who disagrees may cancel its subscription before that date; continued use of the Services means acceptance.

Access to the Services requires an account. The Customer undertakes to provide accurate information and keep it up to date.

Credentials, tokens and API keys (including tsv_ and ts_ virtual keys) are personal and confidential. The Customer is responsible for keeping them safe and for any use made under its account, and promptly reports any unauthorized use to contact@tokensaver.fr; compromised keys can be revoked from the console.

The Customer is responsible for the Users it authorizes and for their compliance with the Terms.

The features and limits of each plan are described on the www.tokensaver.cloud pricing page on the date of subscription:

• Free: thirty (30) day free trial of the Control Plane and console, no credit card, with the Customer’s Provider Keys and trial quotas. After the trial, only the Control Plane and console stop. A Gateway operated by the Customer, enrolled or not, keeps running autonomously with no quota limit, the Customer configuring it itself; the code editor extension, including in “Keep my Claude” mode, can connect to it locally. The Gateway and the extension are available from their release.
• Pro SaaS: subscription per organization. The Control Plane, console and Gateway are hosted by TokenSaver and used with the Customer’s Provider Keys (BYOK), within the plan’s quotas.
• Pro Hybrid: subscription per organization. The Gateway is operated by the Customer on its infrastructure, within the plan’s number of gateways and with no quota limit, using its Provider Keys (BYOK). The Control Plane and console are hosted by TokenSaver.
• Enterprise: annual commercial license. Terms, capacity, service level (SLA), support and deployment mode (dedicated SaaS, hybrid, self-hosted or air-gapped) are defined by contract.

TokenSaver provides no hosted models and does not resell tokens. On every plan, Free included, model requests run on the Customer’s Provider Keys and the Customer pays the Third-Party Provider directly, at its prices. The Customer alone is responsible for complying with Third-Party Providers’ terms, including when using its own subscription (for example in “Keep my Claude” mode).

TokenSaver is not responsible for the availability, performance, prices or changes of Third-Party Providers’ services, nor for the content they generate.

Responses produced by AI models are generated automatically and may be inaccurate, incomplete or inappropriate. The Customer and its Users remain solely responsible for checking them and for how they use them, in particular for code generated by agents, which must be reviewed and tested before any production use.

Optimization features (cache, compression, RAG, routing) may change the context sent to the model. Security features (personal data detection and masking, prompt injection detection, policies, allowlists) reduce risk but do not guarantee that all risky content or behavior is detected. Configuring them is the Customer’s responsibility.

Savings, cost and forecast indicators shown by the Platform are estimates based on Third-Party Providers’ public prices and captured data; they are not invoices.

The Customer undertakes to use the Services in compliance with applicable law, including Regulation (EU) 2024/1689 on artificial intelligence, and in particular not to:

• use the Services for prohibited AI practices, or for high-risk systems without meeting the obligations that apply to them;
• generate or distribute unlawful, misleading, defamatory or hateful content or content infringing third-party rights, or present AI-generated content as human-made where the law prohibits it;
• attempt to bypass quotas, security measures or policies, access TokenSaver’s or other customers’ systems without authorization, or disrupt the Services;
• resell, sublicense or make the Services available to third parties without written consent, or use them to build a competing service;
• reverse engineer the Services, except to the extent permitted by law.

The Free plan is free of charge. Prices of the other plans exclude taxes and are stated in the commercial proposal, the quote or the console at subscription. The Pro SaaS and Pro Hybrid plans are billed monthly, per organization, by card through the payment provider Stripe or under the quote; any started period is due. The Enterprise plan is billed annually, under the agreement or quote.

Free and Pro SaaS quotas are ceilings: beyond them, calls are refused and the console alerts the Customer at 80% usage; there is no usage-based overage billing. On Pro SaaS, any extra capacity requires a proposal accepted by the Customer. The Pro Hybrid plan has no quota limit on the Customer’s gateways. Enterprise capacity is set by contract.

If payment fails, TokenSaver may suspend access after a reminder left unanswered for eight (8) days. Unpaid amounts bear late-payment interest and a €40 fixed recovery fee (article L. 441-10 of the French Commercial Code).

TokenSaver may change its prices; any increase is notified at least thirty (30) days before it applies to the next period, and the Customer may cancel before that date.

The Free plan ends after the thirty (30) day trial, with no action from the Customer. Pro SaaS and Pro Hybrid subscriptions run for one month and renew automatically. The Customer may cancel at any time from the console; cancellation takes effect at the end of the current period, without refund of the started period. The term and termination of the Enterprise plan are set by contract.

A Gateway operated by the Customer keeps running after the end of the trial or of a subscription, without the Control Plane or console. Only the features distributed under an open-source license then remain available.

TokenSaver may suspend or terminate the access of a Customer in serious breach of the Terms (in particular section 8), after formal notice left without effect for fifteen (15) days, or immediately in case of harm to the security of the Services or to third-party rights.

At the end of the agreement, including after the Free trial, the Customer may obtain the Customer Data hosted by TokenSaver for thirty (30) days, on request by email to contact@tokensaver.fr; it is then deleted, unless the law requires otherwise. Data kept on the Customer’s infrastructure remains its sole responsibility.

TokenSaver uses reasonable efforts to provide the Services 24/7, under a best-efforts obligation. No availability level is guaranteed outside an Enterprise plan with a contractual SLA. This commitment covers the Services operated by TokenSaver: the Customer is responsible for operating, keeping available and updating any Gateway installed on its infrastructure.

The Services may be interrupted for maintenance; TokenSaver tries to give notice of planned work. Support is provided by email at contact@tokensaver.fr on business days; dedicated support is part of the Enterprise plan. Autonomous use of a Gateway or of the extension after the Free trial carries no support or service level.

The hosting location depends on the deployment mode. In SaaS, Customer Data is hosted by TokenSaver in data centers located in Europe. In hybrid, prompts, Provider Keys, cache content and detailed replay stay on the Customer’s infrastructure, and the Control Plane only receives metadata and health signals, unless the Customer opts in to sending content. In self-hosted mode, all data stays on the Customer’s infrastructure, whose security is the Customer’s responsibility.

For the data it hosts, TokenSaver implements appropriate technical and organizational measures to keep it secure and confidential (encryption in transit, access control, logging, isolation per organization).

The Customer’s requests are routed to the Third-Party Providers it selects, which may process data outside the European Union under their own terms. The Customer can restrict allowed models from the console, through an allowlist or sovereign mode. This mode lets the Customer select Third-Party Providers hosted in France or Europe; it concerns the choice of Third-Party Provider and is not a sovereignty certification.

For Customer Data containing personal data, the Customer acts as controller and TokenSaver as processor within the meaning of article 28 GDPR. TokenSaver processes such data only to provide the Services, on the Customer’s documented instructions, and assists it with its obligations (security, breach notification, data subject requests, impact assessments). This processor role only covers data actually processed by TokenSaver: data that stays on the Customer’s infrastructure, in hybrid or self-hosted mode, falls outside it.

TokenSaver’s sub-processors include its hosting providers (Railway Corporation for the Platform, Vercel Inc. for the website), its payment provider (Stripe) and its email provider (Resend). The Customer is informed of any change and may object on legitimate grounds. Transfers outside the European Union are covered by appropriate safeguards (European Commission standard contractual clauses).

TokenSaver processes the Customer’s account and billing data as controller. Rights of access, rectification, erasure, objection, restriction and portability can be exercised at contact@tokensaver.fr; a complaint can be lodged with the CNIL. Details are in the privacy policy.

TokenSaver may use technical and aggregated usage data, which identifies neither the Customer nor the content of its requests, to improve the Services. TokenSaver does not use the Customer’s prompts or responses to train AI models.

TokenSaver owns and retains all rights in the Platform, its software, interfaces, documentation and trademarks. The Terms grant the Customer a personal, non-exclusive, non-transferable right to use the Services for its internal needs, for the term of its subscription.

The Customer retains all rights in its Customer Data and the content it produces, and grants TokenSaver the right to process them only as needed to provide the Services.

Open-source components distributed by TokenSaver (including the Gateway, the code editor extension and tokensaver-egress) are governed by their own license, which prevails over the Terms for those components. The Control Plane is not open source, and Enterprise features fall under a commercial license.

Unless the Customer objects in writing, TokenSaver may cite the Customer’s name and logo as a commercial reference.

TokenSaver is bound by a best-efforts obligation. It is only liable for proven fault and for direct damages only. Excluded in particular are data losses attributable to the Customer, loss of revenue, customers or opportunity, and damages resulting from AI-generated content, Third-Party Providers’ services or use not compliant with the Terms.

TokenSaver’s total liability, for all causes combined, is limited to the amount paid by the Customer for the Services in the twelve (12) months before the event giving rise to liability. For the Free plan, it is limited to one hundred (100) euros. These limits do not apply in case of gross negligence or willful misconduct.

The Customer is responsible for backing up its own data, for configuring the policies and quotas it applies and for operating any Gateway installed on its infrastructure.

Neither party is liable for a failure caused by force majeure within the meaning of article 1218 of the French Civil Code, including the failure of a hosting provider, network or Third-Party Provider beyond its control. If the event lasts more than thirty (30) days, either party may terminate without compensation.

Each party keeps confidential the non-public information received from the other party for the term of the agreement and two (2) years after it ends.

Logs, traces and records kept by the Platform are binding between the parties unless proven otherwise.

The Terms are governed by French law. In case of dispute, the parties seek an amicable solution for thirty (30) days from the written claim. Failing that, exclusive jurisdiction is granted to the courts within the jurisdiction of the Aix-en-Provence Court of Appeal, notwithstanding multiple defendants or third-party claims.

Contact: TOKENSAVER, Espace Beauvalle, Bâtiment A, 2 rue Mahatma Gandhi, 13090 Aix-en-Provence, France · contact@tokensaver.fr.