Privacy Policy

1. Information We Collect

We collect the following information:

• Account information: Email address and password (hashed) when you create an account
• Payment information: Processed securely through Stripe. We do not store credit card numbers
• Usage data: Resource consumption metrics (CPU, memory, disk usage) for your instance
• Instance data: Files, configurations, and conversations stored within your OpenClaw instance
• API credentials: Third-party API keys you provide are encrypted with AES-256-GCM before storage

2. How We Use Your Information

• To provide and maintain your OpenClaw instance
• To process payments and manage subscriptions
• To send transactional emails (account verification, password reset)
• To monitor service health and enforce resource limits
• To respond to support requests

3. Data Isolation

Each user's OpenClaw instance runs in a fully isolated container. Your conversations, files, and configurations are not accessible to other users or ClawHousing staff during normal operations. Instance data is stored in dedicated directories with per-user access controls.

4. AI Model Interactions

When you use AI features, your messages are sent to third-party AI providers (such as Anthropic, OpenAI, or Google) through our LiteLLM proxy. These interactions are subject to the respective provider's privacy policies. We do not log or store the content of your AI conversations on our servers beyond what is stored in your instance.

5. Data Security

• All traffic is encrypted with TLS (HTTPS)
• API credentials are encrypted at rest with AES-256-GCM
• Database access is controlled with row-level security policies
• Server access is restricted to key-based SSH authentication
• Containers run with minimal privileges and security hardening

6. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing
• AI providers: Model inference (Anthropic, OpenAI, Google, Azure)
• Hetzner: Server infrastructure hosting

7. Data Retention

Your data is retained as long as your account is active. Upon account deletion, your instance data is removed within 30 days. Backups containing your data are rotated on a 7-day cycle. Payment records are retained as required by law.

8. Your Rights

You have the right to:

• Access and download your instance data
• Delete your account and all associated data
• Update your account information
• Request information about the data we hold

9. Cookies

We use essential cookies only for authentication session management. We do not use tracking cookies or third-party analytics.

10. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes via email. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at admin@clawhousing.com.