Our Core Privacy Principle: Your data never leaves your control. We build technology that respects your privacy by design, not as an afterthought.
1. Introduction
Welcome to PrivatClaw. This Privacy Policy explains how PrivatClaw ("we," "us," or "our") collects, uses, and protects information when you use our AI assistant platform.
We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This policy outlines our privacy practices and your rights regarding your personal information.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (optional)
- Password (encrypted and never stored in plain text)
- Payment information (processed securely through third-party payment processors)
2.2 Usage Information
We collect minimal usage data to improve our service:
- Deployment timestamps
- API usage statistics (anonymous)
- Error logs (for debugging purposes only)
- Performance metrics
2.3 What We DON'T Collect
Important: We do NOT collect, store, or have access to:
- Your AI conversations or message content
- Data processed by your AI assistant
- Information exchanged through connected channels (Telegram, WhatsApp, etc.)
- Any data stored on your isolated server instance
3. How We Use Your Information
We use collected information only for:
- Service Delivery: To provide and maintain your PrivatClaw account
- Billing: To process payments and manage subscriptions
- Support: To respond to your inquiries and provide customer support
- Security: To detect and prevent fraud or unauthorized access
- Improvements: To analyze anonymous usage patterns and improve our service
- Communication: To send important service updates (opt-out available for marketing)
4. Data Storage and Security
4.1 Isolated Architecture
Each PrivatClaw instance runs on an isolated server dedicated to your account. Your AI conversations and data remain on YOUR server, not shared infrastructure.
4.2 Encryption
- In Transit: All data transmitted between your devices and our servers uses TLS 1.3 encryption
- At Rest: All stored data is encrypted using AES-256 encryption
- End-to-End: Optional E2E encryption for maximum privacy
4.3 Zero-Knowledge Architecture
We employ zero-knowledge architecture wherever possible, meaning we cannot access your data even if compelled to do so.
5. Data Sharing and Disclosure
5.1 We Never Sell Your Data
We do not and will never sell, rent, or trade your personal information to third parties for marketing purposes.
5.2 Limited Sharing
We only share information with:
- Service Providers: Trusted partners who help operate our service (hosting, payment processing) under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or to protect our legal rights
- Business Transfers: In the event of a merger or acquisition, with advance notice to users
6. Your Rights and Choices
6.1 Data Access and Portability
You have the right to:
- Request a copy of all data we hold about you
- Export your data in machine-readable formats
- Access your account information at any time
6.2 Data Deletion
You can:
- Delete your account at any time through your dashboard
- Request complete data deletion (we comply within 30 days)
- Remove specific data points from your account
6.3 Marketing Communications
You can opt-out of marketing emails at any time. Service-related communications cannot be opted out of while maintaining an active account.
7. Cookies and Tracking
We use minimal cookies and tracking technologies:
- Essential Cookies: Required for login and security (cannot be disabled)
- Analytics Cookies: Anonymous usage data to improve our service (can be opted out)
- Preference Cookies: To remember your settings and preferences
We do NOT use advertising cookies or cross-site tracking.
8. Third-Party Services
When you connect third-party channels (Telegram, WhatsApp, Slack, etc.), those services have their own privacy policies. We recommend reviewing them:
- Telegram Privacy Policy
- WhatsApp Privacy Policy
- Slack Privacy Policy
- Discord Privacy Policy
9. Children's Privacy
PrivatClaw is not intended for users under 13 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. International Data Transfers
Your data may be processed in countries outside your residence. We ensure adequate protection through:
- EU-US Data Privacy Framework compliance
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
11. Data Retention
We retain your information only as long as necessary:
- Active Accounts: For the duration of your account
- Deleted Accounts: Up to 90 days for backup purposes, then permanently deleted
- Legal Requirements: Certain data may be retained longer for compliance (e.g., financial records for 7 years)
12. Compliance and Certifications
PrivatClaw complies with:
- GDPR: General Data Protection Regulation (EU)
- CCPA: California Consumer Privacy Act (USA)
- HIPAA: Health Insurance Portability and Accountability Act (for healthcare customers)
- SOC 2 Type II: Security, Availability, and Confidentiality
13. Changes to This Policy
We may update this Privacy Policy occasionally. We will notify you of significant changes via:
- Email notification to your registered address
- Prominent notice on our website
- In-app notification
Continued use of our service after changes indicates acceptance of the updated policy.
14. Contact Us
For privacy-related questions or concerns:
- Email: privacy@privatclaw.com
- Data Protection Officer: dpo@privatclaw.com
- Mail: PrivatClaw Privacy Team, [Address]
Need Help? If you have questions about this policy or how we handle your data, our support team is here to help. Contact us at support@privatclaw.com
Last Updated: February 5, 2024
Effective Date: February 5, 2024