Last updated: March 1, 2026

1. Information We Collect

Account data: Email address, name, and profile image via Google OAuth sign-in.

Usage data: Anonymous analytics via PostHog (page views, feature usage). We do not sell your data to third parties.

API keys: Third-party API keys you provide (Anthropic, OpenAI, etc.) are encrypted at rest using AES-256 and only used to operate your container.

2. How We Use Your Data

We use your data solely to provide and improve the Service: account management, container provisioning, Telegram bot pairing, and email communications about your account status.

3. Data Storage & Security

Your data is stored on secure servers. API keys are encrypted with AES-256. Each user's OpenClaw container runs in isolation. We use HTTPS for all communications and follow industry security practices.

4. Third-Party Services

We use the following third-party services:

Google OAuth — for authentication
PostHog — for anonymous analytics
Resend — for transactional emails
Let's Encrypt — for TLS certificates

5. Cookies

We use essential cookies for authentication sessions. We use PostHog for anonymous analytics which may use cookies. We do not use advertising cookies.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Upon account deletion, all associated data and containers are permanently removed within 30 days.

7. Data Retention

We retain your data for as long as your account is active. After account deletion or trial expiration (plus 30-day grace period), all data is permanently deleted.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes via email.

10. Contact

For privacy-related questions, contact us at support@clawtank.dev.