Privacy policy

1. Who we are

Claws is a platform for building, deploying, and operating autonomous AI agent teams, operated by Laxcorp Software Design FZCO, a company registered in the IFZA free zone, Dubai, United Arab Emirates. For anything in this policy, you can reach us at support@buildclaws.ai.

2. Information we collect

Account information. Your name, email address, and authentication details when you sign up (via GitHub, Google, or email magic link).

Billing information. Payments are processed by our payment provider, Dodo Payments. We receive transaction records, subscription status, and a customer reference — we never store your full card details on our systems.

Workspace configuration. The agent teams you build: agent definitions, instructions, schedules, tool connections, and settings.

Credentials you provide. API keys for AI model providers and connected tools. These are encrypted at rest with AES-256-GCM and are only ever decrypted to run your workspace.

Operational activity. Logs of what your agents do — tasks, outputs, quality reviews, approvals, costs, and errors — so your dashboard, monitoring, and attribution features work. Because your agents may process messages and documents as part of their work, this activity data can include content belonging to you or to your own clients (see Section 5).

Usage analytics. First-party product analytics (pages visited, features used, an anonymous identifier) so we can understand and improve the product. We do not use third-party advertising trackers.

Support communications. Anything you send us when you ask for help.

3. How we use your information

To provide and operate the service (deploying and monitoring your workspaces); to process payments and manage subscriptions, trials, and credits; to secure the platform (fraud and abuse prevention, one-trial and one-credit-grant enforcement); to notify you about your operations (approvals, incidents, budgets, digests — configurable in Settings); to improve the product using aggregated, anonymized operational telemetry such as error rates and uptime; and to comply with legal obligations.

4. What we never do

We never sell your personal information. We never use your content, prompts, or agent outputs to train AI models — ours or anyone else's. Your agents call your chosen model provider directly using your own API key, under your own agreement with that provider (Anthropic, OpenAI, and Google all state that API traffic is not used for training by default — check your provider's current terms). Where Claws-provided promotional credits are used, requests run through a Claws-held provider key under the same API terms, and we still do not use the content for training.

5. Your clients' data (when you operate for others)

If you use Claws to run operations that process personal data belonging to your own customers or clients, you are the data controller for that data and Claws acts as your processor. Our Data Processing page describes that relationship, our subprocessors, and our security measures. You are responsible for having a lawful basis to process your clients' data and for what your agents are configured to do with it.

A note on regulated data: Claws is not a healthcare covered entity and does not sign Business Associate Agreements. Compliance features in certain templates (such as communication gates) reduce risk but do not make Claws a HIPAA-compliant environment for storing protected health information. Do not use the platform for workflows that require one.

6. How we share information

Only with: (a) the service providers ("subprocessors") who host and power the platform — cloud hosting, databases, container infrastructure, payment processing, email delivery, logging, and monitoring — listed on our Data Processing page; (b) the AI model providers and tools you choose to connect, under your configuration; (c) authorities, where required by law; and (d) a successor entity in the event of a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data.

7. Security

Credentials encrypted at rest (AES-256-GCM), encryption in transit (TLS), one isolated container per workspace, role-restricted internal access, rate limiting, and continuous monitoring. No system is perfectly secure, but security decisions here are made as if your operation depends on them — because it does. If we become aware of a breach affecting your personal data, we will notify you without undue delay.

8. Data retention

While your account is active, we retain your data to run your service. If you cancel a subscription: your workspace remains intact and instantly resumable for 30 days, then we take a final encrypted backup and remove running infrastructure; the backup is restorable until day 90; after 90 days, workspace data is permanently deleted. If you delete your account: everything is scheduled for permanent deletion after a 14-day grace period (in case you change your mind). Purchased templates remain associated with your account until account deletion.

9. Your rights

You can access and update your information in Settings, export your account data at any time, and delete your account entirely. Depending on your location, you may have additional rights under laws such as the EU GDPR or the UAE Personal Data Protection Law — including access, correction, deletion, and objection. To exercise any right, use Settings or email support@buildclaws.ai.

10. International transfers

Our infrastructure providers operate in multiple regions, which may include the United States and Europe. Where data crosses borders, we rely on our providers' safeguards and standard contractual protections.

11. Age requirement

Claws is for adults. You must be at least 18 years old to use the service, and we do not knowingly collect data from anyone under 18.

12. Changes to this policy

If we make material changes, we'll update the effective date above and notify you by email or in-product notice before the changes take effect.

13. Contact

support@buildclaws.ai — Laxcorp Software Design FZCO, IFZA, Dubai, United Arab Emirates.