Legal
Privacy Policy
Last updated: March 2026
1. Information We Collect
We collect information you provide when creating an account: name, email address, and profile picture (via Google or GitHub OAuth). We also collect usage data such as agent activity metrics and billing information.
2. How We Use Your Information
We use your information to provide and improve the Service, process payments, send transactional emails, and provide customer support. We do not sell your personal data to third parties.
3. API Keys & Credentials
Your LLM API keys are never stored in our database. They are stored exclusively as environment variables on your assigned container infrastructure and are encrypted in transit. We cannot access or view your API keys.
4. Data Storage
Account data is stored in Supabase (PostgreSQL) hosted in the Mumbai region. Agent containers run on Hetzner Cloud infrastructure. All data is transmitted over encrypted connections (TLS/SSL).
5. Third-Party Services
We use the following third-party services: Clerk (authentication), Supabase (database), Razorpay (payments), Hetzner (infrastructure), Cloudflare (CDN/DNS), and Vercel (hosting). Each has their own privacy policies.
6. Data Retention
We retain your account data for as long as your account is active. When you delete your account, we remove your data within 30 days. Container data is deleted immediately upon agent teardown.
7. Your Rights
You can access, update, or delete your account data at any time through your dashboard settings. For data export requests or questions, contact us directly.
8. Contact
For privacy-related questions, email hi@clawlok.com.