Privacy Policy

Introduction

ClawButler ("we", "us", "our") is an open-source Agent control plane. This Privacy Policy explains how we collect, use, and protect your information when you use our cloud service or self-hosted deployment.

Information We Collect

• Account Information: When you register, we collect your email address, display name, and password (stored as a bcrypt hash). You may optionally provide an avatar URL.
• Usage Data: We collect anonymized product analytics (via PostHog) to understand how features are used. This includes page views, feature interactions, and performance metrics — no personal data is linked.
• Error Reports: We use Sentry to collect crash reports and error diagnostics. These may include device type, OS version, and stack traces — but never passwords or personal content.
• Agent Data: If you connect an OpenClaw gateway, we sync agent metadata, session summaries, cost records, and configuration snapshots. Session content stays on your gateway.

How We Use Your Information

We use your information to: (1) provide and maintain the ClawButler service, (2) authenticate your identity and manage access, (3) send service-related notifications (approval requests, health alerts), (4) improve product quality through aggregated analytics, and (5) respond to support requests.

Data Storage & Security

Cloud-hosted data is stored in PostgreSQL databases with encryption at rest and TLS in transit. Self-hosted users manage their own infrastructure. We follow industry-standard security practices including parameterized queries, JWT-based authentication, and role-based access control.

Third-Party Services

We use the following third-party services: Sentry (error monitoring, sentry.io), PostHog (product analytics, posthog.com). These services have their own privacy policies. Self-hosted deployments do not send data to these services unless explicitly configured.

Your Rights

You have the right to: access your personal data, request correction of inaccurate data, delete your account and associated data, export your data, and opt out of analytics. To exercise these rights, use the account deletion feature in the app or contact us.

Data Retention

We retain your data as long as your account is active. When you delete your account, we permanently remove your personal data within 30 days. Anonymized analytics data may be retained longer.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via in-app notification or email. Continued use of the service after changes constitutes acceptance.

Contact Us

For privacy-related questions, please open an issue on our GitHub repository or email us at [email protected].