CLAWME
Claw for Free
← Back to Claw Me

Privacy Policy

How Claw Me handles account, agent, messaging, memory, and publishing data.

Last updated: September 10, 2026

1. What we collect

We collect the information needed to create accounts, provide an alias and workspace, authorize AI clients, deliver limited communications, operate Managed Claws, secure the service, and measure usage.

  • Account data: name, email address and verification status, optional phone number or profile details you supply, alias, authentication and consent records, plan, and billing status.
  • Alias and communications data: @claw.me address, WhatsApp Business number and registration status, approved sender addresses, email metadata and accepted content, attachments, delivery events, and abuse signals. The Agent inbox can retain accepted or quarantined messages; it does not grant access to your personal email account.
  • Claw, authorization, and device data: Managed Claw identifiers, public keys, OpenClaw version, capabilities, paired devices, requested scopes, authorization decisions, connection health, IP address, logs, and audit events.
  • Meetings and enabled call features: meeting links, participant and session metadata, recordings when enabled, transcripts, summaries, and saved outputs. You are responsible for obtaining required participant consent.
  • Wiki and workspace data: approved claims, evidence, proposals, files, Pages, profile information, access grants, and Version History.
  • Usage and billing data: product usage, quantities, wallet balance and controls, subscription events, and payment references. Stripe handles payment credentials. We retain payment and customer references, invoice and subscription status, and limited payment-method information such as card brand, expiry, and last four digits where returned by Stripe, rather than full card numbers or security codes.

2. How we use information

Clawhouse, LLC determines how account, billing, security, and service-operation data is used. When you direct us to store or process personal information in your workspace, your organization may be the controller and we may act as its processor. Where data-protection law requires a lawful basis, we rely on performing our contract for requested services, legal obligations for required records, legitimate interests for proportionate security and service operation, and consent where required for optional communications or features. Contact us about the processing terms applicable to your organization.

  • Provide authentication, Alias, Managed Claws, WhatsApp registration support, limited email delivery, Personal Wikipage, Pages, Drive Storage, Meetings, support, and billing.
  • Deliver authorized data and tasks to the Managed Claw or AI client you select. An inbound email is stored as reading material; receiving it does not by itself authorize an Agent run or an outbound reply.
  • Detect fraud, abuse, spam, security incidents, and reliability problems.
  • Enforce allowances, wallet controls, consent state, opt-outs, and legal or regulatory requirements.
  • Improve product quality using operational data and feedback.
  • Send essential service messages and, where permitted, product communications you can opt out of.

3. Wiki and model processing

Wiki content is canonical in Claw Me so AI clients you explicitly authorize can access the same approved context. They may read permitted knowledge and propose changes, but cannot silently replace approved claims through the Claw Me review flow.

New paid Managed Claw subscriptions can use an initial Claw Me-funded Telnyx model allowance for up to 30 days. Telnyx processes prompts and replies for that allowance, and Claw Me records usage to enforce its limit. When you connect your own model provider inside OpenClaw or another AI client, that provider processes content under your separate account and terms; you enter its credentials directly in that client.

4. Service providers and subprocessors

We disclose information to service providers that help us operate infrastructure, storage, communications, authentication, payments, security, and support. Where we process personal information on a customer’s behalf, providers processing that information on our behalf act as subprocessors. Our infrastructure and communications providers include the following; the information they process depends on the features you use.

We may also disclose information when required by law, to protect rights or safety, in connection with a corporate transaction, or at your direction. We do not sell personal information or share it for third-party behavioral advertising.

  • Telnyx: object storage for Pages, Drive files, and related assets; email, phone-number and communications services; meeting recording, transcription, and summaries; and model inference for the initial Claw Me-funded allowance. Depending on the feature, this can include stored content and metadata, communications content and delivery records, meeting recordings and transcripts, and model prompts and replies. Telnyx’s Data Processing Addendum describes its processing roles, including independent-controller processing for account data and service improvement; see also its Privacy Policy.
  • DigitalOcean, LLC: cloud infrastructure and managed runtime hosting, including the Kubernetes platform used to operate Managed Claws. Data processed on that infrastructure can include account and workspace records, files and other content handled by hosted services or Managed Claws, runtime configuration, and operational logs. See DigitalOcean’s Data Processing Agreement.
  • Stripe: payment processing, saved payment methods, invoices, subscription management, and fraud prevention. Stripe may also process data for its own legal and security purposes. See its Privacy Policy.
  • Cloudflare: edge delivery, network protection, and Turnstile verification, including request, device, network, and security signals.
  • Sentry: error reporting and sampled performance diagnostics where configured. Diagnostic events may contain request and device metadata; default personal-information collection is disabled in our browser SDK configuration.
  • Userlist: account lifecycle and product email where enabled, using contact details, account attributes, consent preferences, and relevant product events.
  • Other providers and integrations: we also use providers for the functions described above. A model provider or other integration that you connect under your own account processes information under your separate relationship with that provider. Contact privacy@claw.me for further information about service providers and their processing.

5. Visibility and sharing

  • Profiles: you control whether the profile associated with your alias is visible and what it contains.
  • Pages: Pages are private by default. You can create expiring links, password access, account or domain allowlists, or deliberate public access.
  • Email and WhatsApp: your verified personal inbox, Inbox sender controls, and applicable communications providers necessarily receive the communications you direct through them. WhatsApp conversation traffic and Meta credentials are sent to your chosen Agent rather than the Claw Me messaging inbox. If you use a Managed Claw, that Agent and its content run on infrastructure operated for your account and may be processed there. Claw Me handles dedicated-number setup and short-lived verification codes. Meta and your Agent’s providers apply their own policies.
  • Authorized AI clients: Claw Me limits access using your scopes and resource permissions. Once a permitted client receives information, its own storage and processing rules apply; revocation cannot recall copies it already received.

6. Retention

We retain account and service data while your account is active and for a reasonable period afterward where needed for recovery, security, billing, fraud prevention, dispute resolution, or legal compliance. Guest previews expire after 24 hours unless claimed to an account before expiry. Account-owned Pages, including Free, remain available within existing account and storage limits. Free files and file links normally expire after seven days. Expiry first restricts access; background cleanup and backup deletion need not happen at the same instant. Saved meeting and call outputs follow workspace retention and owner deletion controls, with separate provider cleanup where supported. Incoming email source is encrypted in Mailroom. Pending messages normally expire after seven days; released source normally follows a 90-day retention period unless the owner selects a different rule. Trash has a 30-day grace period. A released passive reading copy is stored in the destination workspace under its storage and deletion rules. Separate temporary delivery buffers may be deleted after the workspace acknowledges delivery. Content-free delivery and audit records may remain. Deleted Pages and Wiki data may persist in limited backups until those backups expire.

7. Security

We use technical and organizational safeguards designed to protect information, including encrypted transport, tenant isolation, scoped tokens, hashed or encrypted credentials where appropriate, access controls, audit records, and revocation. You are responsible for securing your devices, authorized AI clients, paired clients, model-provider account, Meta account, and credentials.

8. International processing

Claw Me and its service providers may process information in the United States and other countries. International transfers are subject to applicable data-protection requirements. Contact privacy@claw.me for information about the contractual safeguards applicable to your service and providers.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to certain processing. The product includes controls to review memory provenance, correct or forget claims, revoke agents and devices, export content, change sharing, and request account deletion. Account deletion currently requires support-assisted cleanup; submitting a request does not immediately erase stored content. You may also contact privacy@claw.me to make a privacy request, withdraw optional marketing consent, or ask about the applicable retention period. We may need to verify your identity. Where applicable, you may complain to your local data-protection authority. Mandatory rights and response deadlines under applicable law are not limited by this policy.

10. Cookies and Page analytics

We use session cookies and browser storage for sign-in, security, preferences, and setup state. Turnstile and configured diagnostics can process device and request signals. Private Page analytics record Page views, paths, referring domains, country and crawler signals, and a daily visitor identifier derived from IP address and user-agent data rather than an analytics cookie. Cookie-free does not mean that no data is processed. Pages deliberately published by users can contain their own integrations and have their own privacy practices.

11. Children

Claw Me is not intended for people under 18, and we do not knowingly collect personal information from children.

12. Changes and contact

We may update this policy by posting a revised version and changing the date above. Questions and privacy requests may be sent to privacy@claw.me.

Clawhouse, LLC
5203 Juan Tabo Blvd, Suite 2B
Albuquerque, NM 87111
United States