Privacy Policy

1. Introduction

Clawd Colony (“we”, “us”, or “our”) operates the Clawd Colony platform at wizard.clawdcolony.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information You Provide

• Account information: Name, email address, and password (hashed) when you register
• Bot configuration: Bot names, personalities, industry settings, and customization preferences
• Business information: Company name, phone number, website, and business hours (optional, for SMB/Enterprise plans)
• Billing information: Payment details are collected and processed directly by Stripe. We do not store your credit card numbers.
• Support communications: Information you provide when contacting our support team

Information Collected Automatically

• Usage data: Tool call counts, bot activity metrics, and feature usage statistics
• Audit logs: Records of account actions (bot creation, launches, configuration changes) for security and troubleshooting
• Session data: Authentication tokens and session identifiers

Third-Party OAuth Data

When you connect third-party services (Gmail, Slack, Notion, GitHub, etc.) through OAuth, we receive access tokens that allow your bot to interact with those services on your behalf. We do not receive or store your passwords for these services. OAuth tokens are stored encrypted and can be revoked at any time through your dashboard.

3. How We Use Your Information

• Provide the Service: Create and deploy your AI bots, process integrations, and manage your account
• Billing: Process payments, manage subscriptions, and send billing notifications
• Communication: Send account-related emails (welcome, billing receipts, subscription changes, security alerts)
• Improve the Service: Analyze usage patterns to improve features, performance, and reliability
• Security: Detect and prevent fraud, abuse, and unauthorized access
• Legal compliance: Comply with applicable laws and regulations

4. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe: Payment processing and subscription management. Stripe's privacy policy applies to payment data.
• Google: OAuth authentication (Google Sign-In). Google's privacy policy applies.
• Composio: OAuth integration service for connecting third-party apps. Composio's privacy policy applies.
• Telegram, Discord, Slack: Messaging platforms where your bots operate. Each platform's privacy policy applies to messages sent and received through their services.

5. Data Sharing

We do not sell your personal information. We may share your data only in the following circumstances:

• Service providers: With third-party services listed above, solely to provide the Service
• Legal requirements: When required by law, subpoena, or legal process
• Protection: To protect our rights, property, or safety, or that of our users or the public
• Business transfer: In connection with a merger, acquisition, or sale of assets (with notice to affected users)

6. Data Retention and Deletion

• Active accounts: Your data is retained for the duration of your account
• After cancellation: Your data is preserved for a 14-day grace period, during which you may reactivate your account
• After grace period: All personal data, bot configurations, and integration tokens are permanently deleted
• Data export: You may request an export of your data at any time through your dashboard settings
• Audit logs: Retained for up to 90 days for security purposes, then automatically purged

7. Data Security

We implement industry-standard security measures to protect your data, including: HTTPS encryption for all data in transit, encrypted storage for sensitive credentials (OAuth tokens, bot tokens), hashed passwords (bcrypt), and access controls limiting data access to authorized systems only. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access and review the personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your personal data
• Export your data in a portable format
• Revoke OAuth connections to third-party services at any time
• Cancel your subscription and close your account

To exercise these rights, contact us at support@clawdcolony.com.

9. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at: