Privacy Policy

Last updated: March 12, 2026

1. Introduction

ClawStation ("Company", "we", "us", or "our") operates the ClawStation.ai platform. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

We collect the minimum information necessary to operate the Service:

• Account information: Your name, email address, and profile image from Google OAuth authentication
• Usage data: Sign-in timestamps, IP addresses, and basic session information
• Station metadata: Station names, configuration settings (excluding API keys after encryption), and provisioning status
• Payment information: Processed and stored by Stripe. We retain your Stripe customer ID but do not store credit card numbers, CVVs, or bank account details
• EULA acceptance records: Timestamp, version accepted, and IP address for legal compliance

3. Information We Do Not Collect

We explicitly do not collect, access, monitor, or store:

• The content of your AI conversations or chat messages
• Data, files, or documents stored on your station instances
• Your third-party API keys after they are encrypted at rest
• Browsing history, cookies for tracking, or advertising identifiers

4. How We Use Your Information

We use collected information solely for:

• Authenticating your identity and managing your account
• Provisioning and managing your station infrastructure
• Processing payments and managing subscriptions via Stripe
• Sending transactional emails (welcome emails, access codes, service notifications)
• Maintaining security, detecting abuse, and enforcing our Terms of Service

5. Third-Party Services

We use the following third-party services:

• Google OAuth: For authentication only. We receive your name, email, and profile image
• Stripe: For payment processing. Subject to Stripe's Privacy Policy
• Resend: For transactional email delivery. Subject to Resend's Privacy Policy

We do not sell, rent, or share your personal information with third parties for marketing purposes.

6. Data Security

We implement reasonable technical and organisational measures to protect your data, including encryption of sensitive fields at rest, HTTPS for all communications, and access controls on our infrastructure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account or request deletion, we will remove your personal data within thirty (30) days, except where retention is required by law or necessary for legitimate business purposes (e.g., fraud prevention, legal compliance). Station data on bare-metal servers is deleted when your station is deprovisioned.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at legal@clawstation.ai.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

11. Contact

For privacy-related questions or requests, contact us at legal@clawstation.ai.