Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Your name, email address, and profile picture when you sign in with Google.
• Google Workspace data: With your explicit permission, we access Gmail messages, Google Calendar events, and Google Drive files to perform tasks you request.
• Usage data: We collect anonymized analytics about how you use ClawPilot, including features used, task counts, and session duration.
• API keys: If you provide your own API keys, they are stored encrypted and used solely to make API calls on your behalf.

2. How We Use Your Data

• To provide and maintain the ClawPilot service, including executing tasks you request
• To authenticate you and manage your account
• To process payments and manage subscriptions
• To improve the Service based on usage patterns
• To communicate important service updates

We never use your data to train AI models. Your conversations and data are never shared with other users.

3. Third-Party Services

ClawPilot integrates with the following third-party services:

• Supabase: Database and authentication infrastructure
• Stripe: Payment processing (we do not store your full credit card details)
• Anthropic (Claude): AI model provider for generating responses and executing tasks
• PostHog: Product analytics (anonymized usage data only)
• Railway: Application hosting infrastructure

Each of these services has its own privacy policy governing how they handle data.

4. Data Security

We take data security seriously. All sensitive data, including API keys and OAuth tokens, is encrypted using AES-256-GCM encryption. Data is transmitted over HTTPS/TLS. Each user’s data is logically isolated using row-level security policies. We regularly review and update our security practices.

5. Data Retention

We retain your account data for as long as your account is active. Chat history and task logs are retained for 90 days, after which they are automatically deleted. If you delete your account, all associated data is removed within 30 days. Anonymized analytics data may be retained indefinitely.

6. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Delete: Request deletion of your account and all associated data
• Export: Export your conversation history and account data
• Revoke access: Revoke Google Workspace permissions at any time through your Google Account settings
• Opt out: Opt out of analytics tracking from your account settings

7. Cookies

We use essential cookies for authentication and session management. We use PostHog for analytics, which may set cookies to track anonymized usage. We do not use advertising cookies.

8. Children’s Privacy

ClawPilot is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of ClawPilot after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or your data, please contact us at privacy@clawpilot.com.