Privacy Policy

1.1 Information You Provide

• Account Information: Email address, name (optional), password (hashed)
• Telegram Bot Token: Stored encrypted
• Payment Information: Processed by Stripe — we do not store card numbers
• Support Communications: Any information you provide when contacting support

1.2 Information Automatically Collected

• Usage Data: API request counts, deployment status, bot uptime metrics
• Server Logs: IP addresses, browser type, access times
• Cookies: Session tokens and authentication cookies

1.3 Bot Content and Conversations

We do NOT collect or store messages sent to or from your bot, conversation logs, or AI-generated content. These are stored locally on your dedicated VPS. We do not have access to this data unless you explicitly grant us temporary access for support purposes.

• Service Delivery: Provisioning servers, deploying your bot, managing your subscription
• Billing and Payments: Processing fees, managing invoices, handling refunds
• Support: Responding to inquiries, troubleshooting issues
• Security: Detecting fraud, preventing abuse
• Legal Compliance: Complying with Australian and international laws
• Communications: Service updates, maintenance notifications (you can opt out of marketing emails)

3.1 Third-Party Service Providers

• Stripe: Payment processing
• OpenRouter: AI API access
• Hetzner: Server infrastructure
• Email Service: Transactional emails

3.2 Legal Requirements

We may disclose your information if required by valid legal process, government requests, or to protect our rights and safety.

3.3 Aggregated Data

We may share anonymized, aggregated data for business purposes. This data cannot be used to identify you individually.

• Active Accounts: Information is retained while your subscription is active
• Canceled Accounts: Deleted 30 days after cancellation (except billing records)
• Billing Records: Retained for 7 years for tax and legal compliance
• Server Backups: Retained for 7 days, then permanently deleted

We implement industry-standard security measures: TLS/SSL encryption in transit, encrypted storage of sensitive data (API keys, tokens), dedicated VPS isolation per customer, and regular security monitoring. However, no method of transmission is 100% secure.

• Access and Portability: Request a copy of your data — contact support@clawops.io
• Correction: Update account information through your dashboard
• Deletion: Cancel your subscription and email us — data deleted within 30 days
• Opt-Out of Marketing: Click "Unsubscribe" in any marketing email

We comply with APP 8 regarding cross-border disclosure. Your information may be transferred to the United States and European Union where our service providers operate. We take reasonable steps to ensure overseas recipients handle your data in accordance with the Australian Privacy Principles.

• Essential Cookies: Required for authentication and security. Cannot be disabled.
• Analytics Cookies: Help us understand usage patterns. You can opt out via browser settings.
• Third-Party Cookies: May be set by Stripe or other integrated services.

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, contact us at support@clawops.io immediately.

As an Australian business, we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you believe we have breached the APPs, contact support@clawops.io. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

We respect the rights of European users under GDPR. We process your data based on contractual necessity. You have the right to access, correct, delete, and port your data. Contact support@clawops.io for GDPR-related inquiries.

California users have the right to know what personal information we collect, delete their personal information, and opt out of its "sale" — we do not sell personal information. Contact support@clawops.io to exercise CCPA rights.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of material changes by email and website posting. Your continued use constitutes acceptance of the revised policy.

We will respond to your inquiry within 30 days in accordance with the Australian Privacy Principles.