Effective date: March 24, 2026
This Privacy Policy describes how iClawdbot (“we,” “us,” or “our”) collects, uses, stores, and shares information when you use our service. By using the Service, you consent to the practices described in this policy. If you do not agree, you must not use the Service.
2.1 Account Information. When you register, we collect your name, email address, and authentication credentials via Clerk, our third-party identity provider.
2.2 Billing Information. Payment and subscription data is processed and stored by Stripe, Inc. We do not store full payment card numbers. We retain records of subscription tier, billing interval, and transaction IDs.
2.3 Service Data. We store your subscription plan, virtual machine identifiers, server IP address, provisioning status, and OpenRouter API key references in our database (Supabase/PostgreSQL).
2.4 Usage Data. We may collect logs of API calls, errors, and service events for operational and debugging purposes. These logs may include timestamps, IP addresses, and request metadata.
2.5 Support Requests. If you submit a support request, we collect the name, email, and message content you provide.
2.6 Data on Your Virtual Machine. Your dedicated virtual machine may store conversation history, AI memory files, configurations, and any files created by your AI assistant. This data resides on infrastructure operated by Hetzner Cloud and is not routinely accessed by us. You are responsible for the content stored on your virtual machine.
We do not sell your personal information. We do not use your data for advertising.
We share your personal information with third parties only to the extent strictly necessary to provide the Service — including for purposes such as authentication, payment processing, cloud infrastructure, AI inference, and database operations. We do not sell your personal information to third parties, nor do we share it for advertising or marketing purposes.
We may also disclose your information when required by applicable law, regulation, legal process, or governmental authority, or when necessary to protect the rights, property, or safety of iClawdbot, Inc., its users, or the public.
When you interact with your AI assistant, your messages are transmitted to OpenRouter and to third-party AI model providers (such as Moonshot AI). We do not control how these providers process, store, or use your conversation data. You should not transmit sensitive personal information, confidential business data, passwords, or financial information through the AI chat interface.
Conversation history stored on your virtual machine is accessible to you and, in exceptional circumstances for emergency maintenance, to us via administrative SSH access. We will only access your VM in connection with resolving a reported technical issue and will not read or retain conversation content.
We retain your account data for as long as your account is active. Upon account deletion or subscription cancellation, your virtual machine and its contents will be permanently deleted, typically within 24 hours of cancellation taking effect. Account metadata in our database may be retained for up to 90 days for auditing and legal compliance purposes, after which it will be deleted or anonymized.
We cannot recover deleted virtual machine data. Data loss due to VM failure, cancellation, or termination is permanent.
We implement commercially reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS/TLS), access controls, and authentication. However, no security system is impenetrable. We cannot guarantee the absolute security of your data against all threats, including unauthorized access, cyberattacks, hardware failures, or other events beyond our reasonable control. You use the Service at your own risk.
Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us via the support form. We will respond within a reasonable timeframe consistent with applicable law. Note that deleting your account will result in the permanent, irrecoverable loss of all data on your virtual machine.
We use essential cookies and session tokens necessary for authentication and service operation via Clerk. We do not use third-party advertising cookies or tracking pixels. Functional analytics may be collected by our infrastructure providers (Vercel) as part of standard web hosting operations.
The Service is not directed to persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.
Your data may be transferred to and processed in countries other than your country of residence, including the United States, Germany, and other countries where our service providers operate. By using the Service, you consent to such transfers. We take reasonable steps to ensure data is treated securely in accordance with this policy.
We may update this Privacy Policy at any time. Changes are effective immediately upon posting. We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
For privacy-related inquiries, please use the support form on our website.