Privacy Policy

1. Information We Collect

Account information: When you sign in via OAuth, we receive your name, email address, and profile picture from your identity provider (e.g. Google, GitHub).

Usage data: We collect basic analytics such as pages visited, features used, and instance deployment metadata to improve the Service.

Credentials you provide: Channel tokens (Telegram, Discord, WhatsApp) and API keys you configure are encrypted at rest using AES-256-GCM and are never stored in plaintext.

2. How We Use Your Information

• To provision and manage your OpenClaw instances
• To authenticate you and secure your account
• To process billing and manage subscriptions
• To communicate service updates and support
• To improve and maintain the Service

3. Conversations & AI Data

Each OpenClaw instance runs in its own isolated sandbox environment. Your conversations with your AI assistant are processed by the LLM provider you select (e.g. Anthropic, OpenAI, Google) and are subject to their respective privacy policies. ClawPack does not access, store, or log the content of your conversations.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Infrastructure providers (Sprites.dev, Fly.io) to host your instances
• Payment processor (Polar.sh) to handle subscriptions
• Auth provider (WorkOS) to manage sign-in
• LLM providers as selected by you for AI processing

5. Data Security

We use industry-standard security practices including encrypted connections (TLS), encrypted storage for sensitive credentials (AES-256-GCM), hashed API keys with timing-safe comparison, and isolated sandbox environments for each instance.

6. Data Retention

Account data is retained while your account is active. When you delete your account, we remove your personal data and destroy associated instances. Some data may be retained in backups for a limited period.

7. Cookies

We use a session cookie (clawpack-session) for authentication. We do not use third-party tracking cookies.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can delete your account and associated data through the dashboard.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or dashboard notification. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy? Reach us at [email protected].