Privacy Policy
We collect only what we need to run ClawHQ. We don't sell your data. We don't use your conversations to train AI models. Here's exactly what we collect and why.
What We Collect
Things you give us:
- Account info — name, email, password (bcrypt hashed, never stored in plaintext)
- Payment info — processed by Stripe, we never see your full card number
- Chat messages — what you send to your AI agents
- Agent config — names, system prompts, model choices
- API keys — if you use BYOK mode (stored with AES-256 encryption)
- Business info — brand colors, logo, domain (for white-label features)
Things we collect automatically:
- Usage — messages sent, tokens consumed, agents deployed
- Device info — IP, browser type, access times
- Analytics — page views, navigation (privacy-respecting, no third-party trackers)
How We Use It
- Run and improve the service
- Process your payments
- Send you service-related emails (not marketing spam)
- Prevent fraud and abuse
- Comply with legal requirements
Your Chat Messages
When you chat with an agent, your messages go through ClawHQ to whichever AI provider you selected:
- Anthropic (Claude) — anthropic.com/privacy
- OpenAI (GPT) — openai.com/privacy
- Google (Gemini) — ai.google.dev/terms
- DeepSeek — deepseek.com/privacy
We don't read your conversations. We don't train models on them. We don't share them with anyone except the model provider you chose.
Who We Share With
- Stripe — payment processing
- AI providers — your selected model gets your prompts
- Cloud hosting — our infrastructure providers, under data agreements
- Law enforcement — only with valid legal process
That's it. No ad networks, no data brokers, no "partners."
Security
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Isolated Docker containers per agent
- Bcrypt password hashing
- Access controls and audit logging
Retention
As long as your account is active. If you delete your account:
- Personal data — gone within 30 days
- Agent data and conversations — deleted immediately
- Billing records — kept as required by law (typically 7 years)
Your Rights
You can access, correct, delete, or export your data anytime. Email privacy@clawhq.dev — we respond within 48 hours.
Cookies
Essential cookies only — for authentication and sessions. No tracking cookies.
Age Requirement
ClawHQ is not for anyone under 18. If we learn we collected data from a minor, we delete it immediately.
Changes
If we update this policy, we'll email you at least 30 days before material changes take effect.
Questions
Email privacy@clawhq.dev.