Privacy Policy

Last updated: February 8, 2026

MyClaw ("we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our agentic AI computing service ("the Service").

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture. This is the minimum information required to create your account and is provided by Google's OAuth service.

Payment Information

Payment processing is handled entirely by Stripe. We store your Stripe customer ID to manage your subscription, but we never see, store, or have access to your credit card numbers, bank account details, or other financial information.

Instance Configuration

We store metadata about your MyClaw instances including the bot name, region, tier, and status. Your Soul configuration and agent identities are stored on your dedicated instance, not in our central database.

Communication Channel Credentials

When you connect a communication channel (Discord, Telegram, etc.), we encrypt your channel credentials (bot tokens) using AES-256 encryption. These credentials are stored temporarily during provisioning and then deployed directly to your isolated instance. We do not retain plaintext copies of your credentials.

Conversation Data

All conversations between your AI agent and users happen on your dedicated instance. We do not access, monitor, read, or store your conversation data. Conversation logs are stored locally on your instance and are under your control. You can export or delete them at any time.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your subscription payments through Stripe
  • Provision and manage your dedicated instances
  • Send you important service notifications (e.g., billing confirmations, maintenance windows)
  • Respond to your support requests
  • Protect against fraud, abuse, and security threats

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Isolation

Each MyClaw instance runs on a dedicated Google Cloud Platform virtual machine. Your instance is fully isolated from other users' instances. Your AI agent's memory, workspace files, conversation history, and configuration are stored exclusively on your instance and are not shared with or accessible to other users or our central systems.

4. Third-Party Services

The Service relies on the following third-party providers, each with their own privacy policies:

  • Google Cloud Platform — infrastructure hosting for your instances
  • Anthropic (Claude) — AI model provider powering your agents
  • Stripe — payment processing
  • Neon — database hosting for account and subscription data
  • Vercel — web application hosting

When your AI agent processes messages, those messages are sent to Anthropic's API for inference. Anthropic's data retention and privacy policies apply to that processing. We recommend reviewing Anthropic's privacy policy for details.

5. Data Retention

We retain your account information for as long as you maintain an active account. Upon account deletion or subscription cancellation, your dedicated instance and all data on it (conversations, configuration, workspace files) are permanently deleted within 30 days. You can export your data at any time before deletion using the dashboard's export feature.

6. Data Security

We take security seriously and implement the following measures:

  • All data in transit is encrypted via TLS/HTTPS
  • Channel credentials are encrypted at rest with AES-256
  • Each instance is isolated on its own virtual machine
  • Database access is restricted and authenticated
  • Authentication is handled via OAuth 2.0 (Google)

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Rights

You have the right to:

  • Access your personal data stored in our systems
  • Export your instance data at any time via the dashboard
  • Delete your account and all associated data
  • Correct inaccurate personal information
  • Object to processing of your data for specific purposes

To exercise any of these rights, contact us at the email address below.

8. Cookies

We use essential cookies only for authentication (session management via NextAuth.js). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at privacy@myclaw.com.