Legal
Privacy Policy
ClawManager — AI Agent Management Platform
Last updated: March 2025
1. Who We Are
ClawManager (“we”, “us”, “our”) is an AI agent management platform. For questions about this policy, contact us via the dashboard.
2. What Data We Collect
Account Information
- •Name and email address (on registration)
- •Password (stored as a hashed value — never in plain text)
- •Billing information (if applicable, handled by a PCI-compliant payment processor)
Usage Data
- •Agent configurations, names, and settings you create
- •Prompts sent to and outputs received from AI agents
- •API keys you provide for third-party AI providers (stored encrypted)
- •Log data: timestamps, feature usage, error events
- •IP address and basic device/browser information for security purposes
Communications
Any messages you send to our support team.
3. How We Use Your Data
| Purpose | Basis |
|---|---|
| Providing and operating the Service | Contract |
| Sending agent prompts to AI providers | Contract / Legitimate interest |
| Security monitoring and fraud prevention | Legitimate interest |
| Improving the Service (aggregated/anonymised analytics) | Legitimate interest |
| Responding to support requests | Contract / Legitimate interest |
| Complying with legal obligations | Legal obligation |
We do not use your data for advertising or sell it to third parties.
4. Third-Party AI Providers
The Service routes agent prompts and context to third-party large language model (LLM) providers on your instruction. These may include:
- •Anthropic (Claude models) — anthropic.com/privacy
- •OpenAI (GPT models) — openai.com/policies/privacy-policy
- •Other providers you configure
When you use an AI model, your prompts and relevant context are transmitted to that provider. Their privacy policies govern how they handle that data. We do not control what third-party providers do with data once transmitted. Where possible, we use API configurations that opt out of data being used for model training.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion, then 30 days |
| Agent configurations | Until deleted by user or account closure |
| Prompt/output logs | 90 days (rolling), unless you delete sooner |
| Security and access logs | 12 months |
| Billing records | 7 years (UK legal requirement) |
You may request earlier deletion — see Section 7.
6. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews. No system is 100% secure; please use a strong, unique password and enable any available account security features.
7. Your Rights (GDPR)
If you are in the UK or EEA, you have the following rights under UK GDPR / GDPR:
- •Access — request a copy of the personal data we hold about you
- •Rectification — ask us to correct inaccurate data
- •Erasure — ask us to delete your data ("right to be forgotten")
- •Restriction — ask us to limit how we process your data
- •Portability — receive your data in a machine-readable format
- •Object — object to processing based on legitimate interest
- •Withdraw consent — where processing is based on consent
To exercise any of these rights, contact us via the dashboard. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use essential cookies to maintain your session and keep you logged in. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may affect Service functionality.
9. International Transfers
If data is transferred outside the UK/EEA (e.g. to US-based AI providers), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or a prominent notice in the Service. The “Last updated” date at the top reflects the most recent revision.
11. Contact
Data controller: ClawManager
For privacy concerns or to exercise your rights, contact us via the ClawManager dashboard. We aim to respond within 5 business days.
