Privacy Policy

1. Introduction

StartClaw Inc. ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud platform for OpenClaw agents ("Service").

2. Google API Data (Gmail, Calendar, Contacts, Tasks)

If you connect your Google account, StartClaw (and the OpenClaw agent you deploy through StartClaw) will access Google data only to provide the features you enable. Depending on what you turn on, this may include:

• Gmail: sending emails you request; optionally organizing inbox messages (labels, archive, mark read/unread) when you enable inbox automation
• Calendar: creating/updating events you request
• Tasks: creating/updating tasks you request
• Contacts (read-only): recipient lookup and matching

StartClaw only accesses the authenticated user's data and only for the workflows and automations the user configures.

3. Limited Use (Google API Services User Data Policy)

StartClaw's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing features that you explicitly enable (for example: sending an email you requested, creating a calendar event you requested, or organizing emails based on rules you set). We do not sell Google user data, and we do not use Google user data for advertising.

4. AI Processing

If you enable AI-powered features, content needed to complete your request (for example, drafting an email reply or summarizing a thread) may be processed by our AI service providers acting as processors. These providers are not permitted to use your data for advertising or for their own unrelated purposes. You control which automations run and can disconnect Google access at any time.

5. Information We Collect

Information you provide:

• Account information (name, email address, password)
• Billing information (payment card details via our payment processor)
• Agent configurations and settings you create
• Communications with our support team

Information collected automatically:

• Usage data (features used, agent activity metrics)
• Device information (browser type, operating system, IP address)
• Log data (access times, pages viewed, errors encountered)
• Cookies and similar tracking technologies

Agent data:

Your OpenClaw agents process messages and data from connected platforms (WhatsApp, Telegram, Discord, etc.). This data is processed on your dedicated instance and is not accessed by StartClaw staff except when required for technical support with your explicit consent.

6. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Send service-related communications and updates
• Respond to your inquiries and provide customer support
• Monitor usage patterns to improve performance and security
• Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations

7. Data Sharing

We do not sell your personal data. We may share your information with:

• Service providers: Companies that help us operate the Service (cloud hosting, payment processing, analytics)
• Platform providers: When required to enable integrations you've authorized (WhatsApp, Telegram, Discord)
• AI service providers: When you enable AI-powered features, content needed to complete your request may be processed by AI providers acting as processors (see Section 4)
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

8. Data Security

We use industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Isolated cloud instances for each customer
• Access controls and authentication requirements
• Secure storage of OAuth tokens
• Regular security audits and vulnerability assessments
• Secure data centers with physical security measures

Access to production systems is restricted to authorized personnel and services needed to operate StartClaw. While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Data Retention & Deletion

We retain your account information for as long as your account is active. Agent data and message logs are retained according to your configured retention settings. After account deletion, we retain certain data for up to 30 days to allow for account recovery, after which it is permanently deleted. Some data may be retained longer if required for legal, tax, or regulatory purposes.

Google user data is retained only as long as necessary to provide the features you enable and to operate the Service. You can disconnect your Google account at any time, which revokes our access. You may request deletion of stored account data by contacting us at [email protected] .

10. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing
• Revoke Google access: Disconnect your Google account at any time from your dashboard or via your Google account permissions

To exercise these rights, contact us at [email protected]

11. Cookies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use the Service
• Improve our Service based on usage patterns

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

12. International Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by relevant authorities.

13. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will delete such information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: