Privacy Policy

1. Scope

This policy applies to ClawControl.AI websites, product interfaces, APIs, and related services (the "Service"), including dashboard chat, agent runtime features, and connected messaging channels.

2. Data We Collect

• Account data: identifiers and profile information such as email, name, avatar, auth method, timezone, and account status.
• Subscription and billing data: plan, billing state, product/subscription identifiers, usage counters, and payment metadata from our billing provider.
• Conversation and memory data: prompts, responses, memory entries, chat session metadata, and platform message identifiers.
• Integration data: messaging platform account IDs, usernames, connection state, webhook metadata, and related operational fields.
• Agent and infrastructure data: provisioned server metadata, deployment events, health checks, command/runtime logs, and diagnostics.
• Security and audit data: webhook events, anti-abuse/rate-limit data, and admin audit logs.
• Support and communications: messages you send to support and notification delivery records.
• Model/provider key data: bring-your-own provider keys and related model preferences (stored encrypted at rest where supported in the platform).

3. How We Use Data

We process personal data to:

• Authenticate users and operate accounts.
• Provision and run dedicated agent infrastructure.
• Process messages, generate responses, and maintain memory/context.
• Manage subscriptions, billing, and usage limits.
• Protect the Service, prevent abuse, and troubleshoot failures.
• Send transactional notifications and provide support.
• Meet legal obligations and enforce our terms.

4. Legal Bases (EEA/UK)

Where applicable, we process data under contract necessity (providing the Service), legitimate interests (security, reliability, fraud prevention, product operations), consent (where required), and legal obligations.

5. How We Share Data

We share data with service providers that help us operate ClawControl.AI, such as:

• Identity/authentication providers (for sign-in and account security).
• Billing providers (for subscription payments and billing lifecycle events).
• Cloud infrastructure/network providers (for hosting, tunnels, and access control).
• Messaging platforms you connect (for WhatsApp/Telegram delivery and receipt).
• Model providers used to generate AI outputs.
• Email and operational tooling providers (for notifications and reliability monitoring).

We may also disclose data when required by law, to protect rights/safety, or in connection with a merger, acquisition, financing, or asset transfer.

We do not sell personal information for money and do not use your private conversation content to train our own foundation models.

6. International Processing

Depending on your selected configuration and integrations, your data may be processed in multiple countries. We use appropriate contractual and technical safeguards where required.

7. Data Retention

We retain personal data for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements.

• Conversations and memory remain until you delete them, delete your account, or they are otherwise removed under product controls.
• Operational, billing, and security logs are retained for business and legal purposes for a limited period appropriate to their purpose.

8. Security

We use reasonable technical and organizational controls designed to protect your data, including encrypted transport, access controls, and monitored infrastructure. No system is completely secure, so we cannot guarantee absolute security.

9. Your Choices and Rights

You can manage your data directly in the app, including:

• Updating profile fields and notification preferences.
• Disconnecting messaging integrations.
• Clearing memories and conversation history.
• Requesting a data export from the Data settings area.
• Deleting your account from Security settings.

Depending on your region, you may have additional rights (for example: access, correction, deletion, portability, restriction, objection, and withdrawal of consent where applicable). To exercise rights not available in product settings, contact us at [email protected].

10. Messaging Channels and Third-Party Terms

If you connect channels like WhatsApp or Telegram, your use is also subject to those providers' terms and privacy practices. Messages are routed through those networks and may be processed by model providers to generate responses.

11. Cookies and Similar Technologies

We use cookies and similar technologies for core functionality such as authentication, sessions, and preferences. See our Cookie Policy for details.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

13. Policy Changes

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Material changes may also be communicated through the Service or by email when appropriate.

14. Contact

For privacy questions, data-rights requests, or enterprise compliance inquiries, contact [email protected].