Privacy Policy

1. Introduction

Clawd ("we," "us," or "our") operates the clawd.co website and personal AI assistant service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy applies to users worldwide. We are committed to complying with applicable privacy laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Information You Provide

• Account information: Email address when you sign up
• Payment information: Billing details processed securely through Stripe (we do not store your full credit card numbers)
• Messages: Conversations with your AI assistant, including text, media, and voice-call transcripts
• Workspace files: Documents, notes, and code you save to your workspace
• Connected accounts: Messaging platform credentials when you link WhatsApp, Telegram, or Discord

2.2 Information Collected Automatically

• Usage data: Message counts, feature usage, and credit consumption
• Device information: Browser type, operating system, device type
• Log data: IP address, access times, request identifiers for debugging

3. How We Use Your Information

We use your information to:

• Provide the AI assistant service (process messages, execute tools, maintain memory)
• Process payments and manage your account
• Maintain conversation context and memory across sessions
• Improve the Service (aggregate, anonymized usage patterns)
• Detect and prevent abuse, fraud, and security incidents
• Comply with legal obligations

4. How We Store Your Data

Your data is stored on Cloudflare's global infrastructure:

• Conversations and messages: Cloudflare Durable Objects with SQLite storage (encrypted at rest)
• Files and media: Cloudflare R2 (encrypted at rest, no egress fees)
• Memory embeddings: Cloudflare Vectorize (semantic vectors, not plaintext)
• Session tokens: Cloudflare KV (short-lived, auto-expiring)

We do not use per-user virtual machines. Your data is isolated per-account within our multi-tenant infrastructure.

5. What We Never Do

• We never sell your personal information to third parties
• We never share your conversations with advertisers
• We never use your conversations to train AI models
• We never access your conversations for marketing purposes

6. Data Sharing

We may share your information with:

• AI model providers: Your messages are processed by AI providers (Google Gemini, OpenAI, Anthropic) to generate responses. These providers have their own privacy policies.
• Payment processor: Stripe processes your payments. Stripe Privacy Policy
• Infrastructure providers: Cloudflare hosts our service. Cloudflare Privacy Policy
• Legal requirements: When required by law, legal process, or governmental request

7. Data Retention

• Account data: Retained while your account is active
• Conversations: Retained until you delete them or delete your account
• Usage records: Retained for billing and analytics purposes
• Payment records: Retained as required by tax and accounting laws

8. Your Rights

All Users

• Access your personal information
• Correct inaccurate data
• Delete your account and have associated Clawd data deleted
• Export your conversation data

EEA Users (GDPR)

• Object to processing based on legitimate interests
• Restrict processing of your data
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

California Users (CCPA)

• Know what personal information is collected about you
• Know whether your personal information is sold or disclosed and to whom
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

9. Account Deletion

You can delete your account at any time from the app settings. When you do, we begin deleting your Clawd data and unlinking connected channels.

• Conversation history, memories, and workspace files are removed from Clawd systems
• Connected channel accounts are unlinked
• Account information used to operate the Service is removed
• We may retain records we are required to keep for billing, tax, fraud prevention, or legal compliance

This action is irreversible. Some deletion steps may take time to finish across our systems.

10. Security

We implement security measures including:

• Encryption of data in transit (TLS) and at rest
• Per-user data isolation
• Private tools disabled in group chats by default
• Defense-in-depth tool execution guards
• Rate limiting and abuse detection
• Error sanitization (internal errors never exposed to users)

11. Cookies

We use essential cookies and local storage for authentication and session management. We do not use tracking cookies or third-party analytics.

12. Children's Privacy

Our Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and changing the "Last updated" date.

14. Contact

If you have questions about this Privacy Policy, contact us at hello@clawd.co.