← Back to home

Privacy Policy

Last updated: 4 May 2026

1. Introduction

Claws ("we", "us", "our") operates the Service at use-claws.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Account information

When you sign in with Google, we receive your name, email address, and profile picture. This is used to create and manage your account.

Messages and content

Messages sent to and from your AI agents are stored to maintain conversation context and enable features like memory and task management. This includes messages from Slack and Telegram.

Integration tokens

When you connect Slack, Telegram, or other platforms, we store OAuth tokens and API credentials required to operate the agents on your behalf. These are encrypted at rest.

Usage data

We track message counts per billing period to enforce plan limits. We do not use third-party analytics or tracking scripts.

Payment information

Payments are processed by Polar. We do not store your credit card details. We receive your Polar customer ID and subscription status.

3. Google API Data

When you connect Gmail or Google Calendar in Settings, we request the following Google API scopes on your behalf:

  • https://www.googleapis.com/auth/gmail.readonly — Allows your Claws assistant agent to read your Gmail inbox and message content so it can triage emails, surface urgent threads, and take instructions from email on your behalf.
  • https://www.googleapis.com/auth/calendar.readonly — Allows your Claws assistant agent to read your Google Calendar events so it can check your availability, summarise upcoming meetings, and incorporate your schedule into task and reminder management.

Limited Use

Claws's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs is used only to provide and improve the features visible to you in Claws. It is not used for advertising, is not transferred to third parties except as necessary to operate the service (see Section 7 below), and is not used for any purpose unrelated to providing the service you requested.

Human access to Google data

Claws does not allow humans to read your Gmail messages or Calendar events except in the following limited circumstances: (a) you have given explicit permission for a specific interaction; (b) it is necessary for security or fraud-prevention purposes; (c) it is required to comply with applicable law; or (d) data has been aggregated and anonymised such that individual users cannot be identified.

Retention of Google data

Gmail message content and Calendar event data accessed by your agent are processed in real time and are not persisted to our database. OAuth access and refresh tokens are stored encrypted at rest in Supabase and are deleted immediately when you disconnect the integration from Settings. Conversation summaries generated by the agent (which may reference email or calendar content) follow the general retention policy in Section 8.

4. How We Use Your Data

  • To provide and operate the AI agent Service.
  • To maintain conversation history and agent memory.
  • To manage your subscription and enforce usage limits.
  • To send transactional emails (billing, account changes).
  • To improve and debug the Service.

We do not sell your data. We do not use your messages to train AI models.

5. AI Processing

Your messages are sent to Anthropic's Claude API for AI processing. Anthropic's API data is subject to their privacy policy. Per Anthropic's commercial terms, API inputs and outputs are not used to train their models.

6. Data Storage

Your data is stored in Supabase (hosted on AWS). Database sessions, agent memories, tasks, and message history are stored in PostgreSQL. We use industry-standard security practices including encrypted connections and row-level security policies.

7. Data Sharing

We share data only with:

  • Anthropic — to process AI requests (Claude API).
  • Polar — to process payments.
  • Supabase — to host our database.
  • Vercel — to host the application.
  • Slack / Telegram — to deliver agent messages to your workspace.

We do not share data with advertisers or data brokers.

8. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days in case you resubscribe, then permanently deleted. You may request immediate deletion at any time by contacting us.

9. Your Rights

You have the right to:

  • Access — request a copy of your data.
  • Correction — request corrections to inaccurate data.
  • Deletion — request deletion of your data.
  • Export — request your data in a portable format.
  • Objection — object to specific uses of your data.

To exercise these rights, email support@use-claws.com.

10. Cookies

We use essential cookies only — session cookies for authentication (NextAuth.js). We do not use tracking cookies, advertising cookies, or third-party analytics.

11. Changes

We may update this policy as our Service evolves. Material changes will be communicated via email. Continued use of the Service constitutes acceptance of the updated policy.

12. Contact

For privacy inquiries, contact us at support@use-claws.com.