Data Categories
ClawAI may process account and authentication data; email and name when provided; prompts, messages, responses, chat history, attachments, and uploads; preferences such as language; technical logs, IP, device, and security events; cookies and analytics; billing metadata, plan, invoice, subscription status, and billing-provider identifiers, without storing raw card data.
Purposes
Data is used to create and protect accounts, provide AI functionality, process uploads and conversations, maintain history when enabled, support users, operate billing, prevent fraud and abuse, diagnose issues, comply with law, and improve the product proportionally and with documentation.
LGPD Legal Bases
Processing may rely on contract performance, legal or regulatory compliance, legitimate interest with balancing, consent when required, and regular exercise of rights.
AI and Service Subprocessors
Prompts, responses, attachments, and metadata may be sent to third-party LLM/AI, hosting, observability, security, and payment subprocessors to operate the service. Real subprocessors must be listed when defined.
International Transfers
Data may be processed outside Brazil when international providers are used, with applicable contractual and technical safeguards.
Retention, Deletion, and Data Rights
Data is retained as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and keep backups for a limited period. Users may request export or deletion under LGPD, subject to legal retention. Rights include confirmation of processing, access, correction, anonymization, blocking, deletion of unnecessary data, portability when applicable, sharing information, consent withdrawal, and review of automated decisions when applicable.
Security
ClawAI applies proportional access controls, segregation, logs, secret protection, secure transport where applicable, incident response, and minimization.
Cookies, Analytics, and Minors
Essential cookies and analytics may be used, with management options where required. The policy for children and adolescents remains pending and must be finalized before public checkout or minor-directed commercial use.
Contact and Requests
Privacy requests should be sent to {{DPO_OR_PRIVACY_EMAIL}}. General support should be sent to {{SUPPORT_EMAIL}}.