Skip to content
Last updated: March 2026

Privacy Policy

1. Introduction

OpenClaw Cloud ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform and services.

By using OpenClaw Cloud, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. What Data We Collect

Account Data

When you create an account, we collect your name, email address, and password (stored in hashed form).

Payment Data

Payments are processed by Lemon Squeezy, our Merchant of Record. We do not store your credit card details. Lemon Squeezy handles all payment information in accordance with PCI DSS standards.

Agent Data

Conversations, files, and memory associated with your AI agents are stored on your agent's infrastructure. For standalone agents, this data stays on your own hardware.

Usage Data

We collect data about how you use the platform, including token consumption, API calls, and feature usage, to maintain and improve our services.

Technical Data

We automatically collect certain technical information, including your IP address, browser type, device information, and operating system.

Cookies

We use essential cookies for authentication and session management. Analytics cookies (Google Analytics 4) are only set after you provide consent.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • Provide, operate, and maintain the OpenClaw Cloud platform
  • Process payments and manage your subscription
  • Send important service notifications, such as security alerts and billing updates
  • Improve the platform based on aggregated usage patterns
  • Comply with legal obligations and enforce our terms

4. Data Storage & Security

Your data is stored on Amazon Web Services (AWS) in the EU region (eu-central-1, Frankfurt). All data is encrypted at rest and in transit using industry-standard encryption protocols.

Agent data is stored in isolated environments, ensuring strict separation between users. For standalone agents running on your own hardware, data remains entirely under your control.

5. Third-Party Services

We work with the following third-party services to provide our platform:

  • AI Providers (Anthropic, OpenAI, Google) — your prompts are sent to these providers for AI processing
  • Lemon Squeezy — payment processing and subscription management
  • Google Analytics — website analytics (only activated after your consent)
  • Amazon Web Services — infrastructure hosting and data storage
  • Crowdin — translation and localization management

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right to access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data ("right to be forgotten")
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to restrict processing — request that we limit how we use your data
  • Right to object — object to our processing of your personal data
  • Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@openclaw-cloud.io. We will respond within 30 days as required by GDPR.

7. Cookie Policy

Essential Cookies

These cookies are necessary for the platform to function and cannot be disabled. They include authentication tokens and session identifiers.

Analytics Cookies

We use Google Analytics 4 to understand how visitors interact with our website. These cookies are only activated after you provide explicit consent via our cookie consent banner.

Advertising Cookies

We do not use any third-party advertising cookies. Your data is never sold to advertisers.

You can manage your cookie preferences at any time through our cookie consent banner or your browser settings.

8. Data Retention

  • Account data — retained while your account is active, plus 30 days after account deletion
  • Agent data — deleted within 30 days of agent termination
  • Audit logs — retained for 30 days
  • Payment records — retained as required by applicable tax and financial regulations

9. International Transfers

Your data is primarily processed and stored in the European Union (AWS eu-central-1, Frankfurt). However, AI provider processing may occur in the United States. Where data is transferred outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. For significant changes, we will notify you via email. We encourage you to review this page periodically.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@openclaw-cloud.io.