1. Overview
KeepClaw ("we", "us", "our") operates the KeepClaw personal AI agent hosting platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.
By using KeepClaw, you agree to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
Our core commitment
We will never sell your personal data or your conversation history to third parties. We will never use your conversations to train AI models — ours or anyone else's.
2. Information We Collect
2.1 Information you provide
- Account information — name, email address, and password (or OAuth token) when you register.
- Payment information — billing name and address. Payment card details are processed by our payment provider (Stripe) and never stored on our servers.
- Profile information — display name and notification preferences you set in your account settings.
- Integration credentials — Telegram bot usernames and Slack workspace tokens you provide to connect integrations.
- Communications — messages you send to our support team.
2.2 Information generated by your use
- Conversation history — messages sent to and received from your AI agent.
- Task records — a log of tasks your agent has executed, including timestamps and credit usage.
- Usage data — feature interactions, pages visited, and session durations within the dashboard.
- Agent configuration — settings, enabled integrations, and agent status preferences.
2.3 Information collected automatically
- Log data — IP address, browser type, operating system, referring URL, and request timestamps.
- Device data — device identifiers, screen resolution, and language settings.
- Cookies — session tokens and preference cookies. See Section 7 for details.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service — including routing your messages to AI models, executing agent tasks, and displaying results.
- Manage your account, authenticate your identity, and enforce security.
- Process payments and send transaction confirmations.
- Send service-related notifications (e.g., credit alerts, task completion notifications) when you have opted in.
- Respond to your support requests and resolve technical issues.
- Monitor aggregate usage patterns to identify bugs and performance bottlenecks (no individual profiling).
- Comply with legal obligations.
What we will never do
- Sell your personal data or conversation history to any third party.
- Use your conversation content to train, fine-tune, or evaluate any AI model.
- Share your data with advertisers for targeting purposes.
4. Data Sharing and Disclosure
We share your data only in the following limited circumstances:
4.1 AI model providers
To fulfill your requests, your messages are transmitted to third-party AI providers (such as OpenAI, Anthropic, and Google). These providers process your data under their own privacy policies and, per our data processing agreements, are prohibited from using your content for model training.
4.2 Infrastructure and service providers
We use trusted sub-processors — including cloud hosting (AWS), payment processing (Stripe), error monitoring, and analytics. All sub-processors are contractually bound to process data only as instructed and maintain appropriate security measures.
4.3 Legal requirements
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect rights, property, or safety.
4.4 Business transfers
In the event of a merger, acquisition, or sale of assets, user data may be transferred to the new entity. We will provide notice before any transfer and, where feasible, allow you to delete your account first.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion + 30 days |
| Conversation history | 90 days rolling, or until deleted by user |
| Task logs | 12 months |
| Payment records | 7 years (legal requirement) |
| Usage analytics | 24 months, aggregated only |
| Server logs | 30 days |
You can delete your conversation history or your entire account at any time from the Settings page. Upon account deletion, we remove your personal data within 30 days, except where legal retention obligations apply.
6. Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted using TLS 1.3.
- Data at rest is encrypted using AES-256.
- Access to production systems is restricted to authorized engineers using multi-factor authentication.
- We conduct regular security audits and penetration tests.
- Our infrastructure is SOC 2 Type II certified.
Despite these measures, no system is completely secure. If you believe your account has been compromised, contact us immediately at security@keepclaw.ai.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Request deletion of your data (right to be forgotten).
Portability
Receive your data in a structured, machine-readable format.
Restriction
Request that we limit how we process your data.
Objection
Object to processing based on legitimate interests.
To exercise any of these rights, email privacy@keepclaw.ai. We respond to verified requests within 30 days. Many actions (deletion, data export) are also available directly in your account Settings.
9. Children's Privacy
KeepClaw is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If we learn that we have inadvertently collected such data, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@keepclaw.ai.
10. International Data Transfers
KeepClaw operates from the United States. If you access our Service from outside the US, your data may be transferred to and processed in the United States. We use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for transfers from the EEA, UK, and Switzerland. For users in California, we comply with the California Consumer Privacy Act (CCPA).
11. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by email (to the address on your account) and by posting a prominent notice on our website at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
12. Contact Us
For privacy-related questions, requests, or concerns:
KeepClaw Privacy Team
Email: privacy@keepclaw.ai
Address: 340 Pine St, Suite 800, San Francisco, CA 94104
Response time: Within 30 business days