Privacy Policy

1. Introduction

ClawdHost ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your information when you use our MoltBot hosting service. By using ClawdHost, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information:

• Email address (required for account creation)
• Name (if provided)
• Authentication data via Clerk (our identity provider)

Payment Information:

• Billing information processed by Stripe (we do not store credit card numbers)
• Transaction history and subscription status

Technical Information:

• Server provisioning data (instance IDs, IP addresses, status)
• Service usage metrics for operational purposes
• Error logs and diagnostic information
• Analytics data via PostHog (pageviews, session recordings, performance metrics)

3. How We Use Your Information

• Provision and maintain your MoltBot server instance
• Process payments and manage your subscription
• Send service-related communications (downtime, updates, billing)
• Provide customer support
• Improve our service through analytics
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations

4. Your MoltBot Instance Data

Important: Your MoltBot instance runs on dedicated infrastructure provisioned specifically for you. Regarding data on your instance:

• We do not routinely access, monitor, or store the contents of your MoltBot activities
• Your API keys, messages, files, and MoltBot outputs remain on your instance
• We may access your instance for technical support only with your explicit consent
• We may access logs or data if required by law or to investigate violations of our Terms
• You are solely responsible for any data processed by MoltBot, including personal data of third parties that MoltBot may access or process

5. Third-Party Services

We use the following third-party services that may process your data:

• Stripe (USA) - Payment processing
• Clerk (USA) - Authentication and identity management
• Hetzner (Singapore) - Linux server infrastructure
• Scaleway (France) - macOS server infrastructure
• Cloudflare (USA) - Secure tunnel access and DNS
• Resend (USA) - Email delivery
• PostHog (EU) - Product analytics and session recording
• Neon (USA) - Database hosting

Each of these services has their own privacy policies. We recommend reviewing them if you have concerns about how your data is handled.

6. Data Retention

• Account information: retained while your subscription is active
• Server instance data: permanently deleted within 7 days of subscription cancellation or account termination
• Payment records: retained for 7 years as required by French tax law
• Support communications: retained for 2 years
• Analytics data: retained for 2 years

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at support@clawdhost.tech. We will respond within 30 days.

8. Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions.

9. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure server infrastructure, and access controls. However, no method of transmission or storage is 100% secure. You are responsible for keeping your account credentials and API keys secure.

10. Cookies and Analytics

We use cookies and similar technologies for:

• Authentication and session management
• Analytics and service improvement (PostHog)
• Conversion tracking (Google Tag Manager)

PostHog session recordings may capture your interactions with our website. Sensitive inputs are masked automatically.

11. Children's Privacy

ClawdHost is not intended for use by children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or through the service. Continued use of ClawdHost after changes take effect constitutes acceptance of the updated policy.

13. Data Controller

ClawdHost is the data controller for your personal information. For privacy-related inquiries or to exercise your rights, contact:

Email: support@clawdhost.tech

14. Supervisory Authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection authority. For users in France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).