Privacy Policy

Who We Are

ClawSetup provides managed OpenClaw hosting as a service. We handle provisioning, deployment, and ongoing maintenance of OpenClaw instances so you can focus on running your business.

Information We Collect

We collect the following information to provide and improve the Service:

• Email address, name, and company name (provided at signup)
• API keys required to configure your OpenClaw instance
• Usage data such as login times, feature usage, and instance metrics

How We Use Your Information

Your information is used for the following purposes:

• Provisioning and maintaining your OpenClaw instance
• Processing billing and payments
• Providing customer support
• Improving the Service and developing new features

API Key Handling

Your API keys are treated with the highest level of care. All keys are encrypted at rest using AES-256-GCM. Keys are only decrypted inside your isolated container at runtime and are never written to logs, displayed in dashboards, or accessible to our support team.

Third-Party Services

We rely on the following third-party providers to operate the Service:

• Stripe — payment processing and billing
• SendGrid — transactional email delivery
• Hetzner — server hosting and infrastructure
• Turso — database services

Each provider processes only the minimum data required for their function and is bound by their own privacy policies.

Data Retention

Your data is retained for as long as your subscription is active. After cancellation, we retain your data for 30 days to allow you to export it or reactivate your account. After the 30-day window, all data associated with your account is permanently deleted from our systems.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request rectification of inaccurate data
• Request deletion of your data
• Request a portable copy of your data in a standard format

To exercise any of these rights, contact us at privacy@clawsetup.com.

Security

We implement multiple layers of security to protect your data. Each customer instance runs in an isolated Docker container with dedicated firewall rules. Secrets are encrypted at rest, and all communication between services uses TLS encryption.

Cookies

We use minimal, session-only cookies that are required for the Service to function. These cookies are used to maintain your authenticated session and do not track you across other websites. We do not use advertising or analytics cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes at least 30 days in advance via the email address associated with your account. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Contact

If you have any questions about this Privacy Policy, please contact us at privacy@clawsetup.com.