Privacy Policy
Last Updated: February 11, 2026
Clawz ("we," "our," or "us") operates the Clawz.io platform. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
Information We Collect
Account Information
When you create an account, we collect your email address and authentication credentials. Passwords are securely hashed using industry-standard bcrypt hashing and are never stored in plain text.
API Keys
You provide your own API keys for AI services (such as Anthropic's Claude, OpenAI, or others). These API keys are:
- Encrypted at rest using industry-standard AES encryption
- Encrypted in transit using TLS 1.2+ encryption
- Stored securely in our database with encryption at the application level
- Never shared with any third parties, including us (your keys are decrypted only when making requests to the AI services on your behalf)
Conversation Data
Messages you send to and receive from your AI agent are processed to provide the service. Conversations are stored in your private workspace within your isolated infrastructure.
Workspace Data
Files created and stored in your workspace belong to you. All workspace data is stored in your private, isolated cloud environment accessible only to you.
Usage Data
We collect anonymous usage metrics such as session duration and feature usage to improve the platform. We do not sell or share this data with third parties.
Payment Information
Payment processing is handled securely through Stripe. We do not collect or store your payment card details. All payment information is processed directly by Stripe's secure payment infrastructure.
How We Use Your Information
We use your information to:
- Provide and maintain the Clawz.io service
- Process your AI agent requests using your provided API keys
- Manage your account and subscription
- Improve platform performance and reliability
- Communicate important service updates and security notices
- Prevent fraud and abuse of our platform
Data Storage and Security
Encryption
Your data security is our top priority:
- All API keys are encrypted using industry-standard AES encryption before storage
- Data in transit is protected by TLS 1.2+ encryption
- Data at rest is encrypted using industry-standard encryption protocols
- Your workspace data is stored in secure, isolated cloud infrastructure
Isolation
Each user's workspace is completely separated from other users. We employ strict access controls and authentication measures to ensure your data remains private.
Security Measures
We implement industry-standard security practices including:
- Regular security audits
- Penetration testing
- Secure authentication protocols
- Monitoring for suspicious activity
- Immediate incident response procedures
API Key Handling
Your API keys are handled with the highest security standards:
- Storage: API keys are encrypted immediately upon entry and stored only in encrypted form
- Usage: Keys are temporarily decrypted only in memory to make API requests to AI services
- Access: Our support team cannot view your API keys at any time
- Revocation: You can remove or update your API keys at any time from your account settings
- Responsibility: You remain in control of your API keys and their usage through our platform
Third-Party Services
AI Service Providers
Clawz enables you to connect with various AI service providers (such as Anthropic, OpenAI, etc.) using your own API keys. Your messages and requests are sent directly to these providers using your credentials. Please review the privacy policies of any AI service providers you choose to connect with.
Payment Processing
Our payment processing is handled by Stripe. Please review Stripe's Privacy Policy for details on their data handling practices.
Data Retention
Your conversation history, workspace files, and account data are retained as long as your account is active. You may:
- Export your data at any time
- Request deletion of your account and all associated data
- Remove specific API keys from your account
To request data deletion, contact us at the email below.
Children's Privacy
Clawz.io is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your personal data
- Deletion: Request deletion of your account and associated data
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing of your personal data
To exercise these rights, contact us at the email below.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes through:
- Email notification
- In-app notification
- Website banner
Continued use of Clawz.io after changes constitutes acceptance of the updated policy.
Data Breach Notification
In the unlikely event of a data breach that affects your personal information, we will:
- Notify you within 72 hours of becoming aware of the breach
- Provide details about what data was affected
- Explain the steps we are taking to address the breach
- Provide guidance on steps you can take to protect yourself
Contact Us
For privacy-related questions, requests, or concerns:
- Email: privacy@clawz.io
- Website: https://clawz.io
Cookie Policy
We use essential cookies to provide and improve our services. Cookies are small files stored on your device that help us authenticate your session and remember your preferences. You can manage cookie settings through your browser, but disabling cookies may affect functionality.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.