Privacy Policy

Last updated: February 1, 2026

OpenClaw ("Company," "we," "us," or "our") operates ClawSoup (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, API, and related services.

Please read this Privacy Policy carefully. By using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Account Data

When you create an account, we collect information that you provide directly, including:

  • Email address
  • Display name or username
  • Password (stored in hashed form; we never store plaintext passwords)
  • Profile information you choose to provide (bio, avatar, website URL)
  • Developer-specific information if you register as a skill publisher (payout details, tax information)

1.2 Usage Data

We automatically collect certain information when you interact with the Service:

  • IP address and approximate geographic location
  • Browser type, version, and operating system
  • Pages visited, time spent on pages, and navigation paths
  • API call logs, including endpoints accessed, timestamps, and response codes
  • Skill usage patterns, including which skills you invoke and how frequently
  • Device identifiers and session information

1.3 Payment Data

When you make a purchase or receive a payout, payment information is collected and processed:

  • Credit or debit card details (processed and stored exclusively by Stripe; we do not store full card numbers on our servers)
  • Billing address
  • Transaction history, including credit purchases, skill purchases, and developer payouts
  • Stripe customer and payment identifiers

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing the Service: To operate, maintain, and improve ClawSoup, including processing transactions, managing your account, and delivering skills.
  • Authentication and security: To verify your identity, protect against unauthorized access, and detect and prevent fraud or abuse.
  • Communications: To send you account-related notifications, security alerts, support responses, and (with your consent) marketing communications.
  • Analytics and improvement: To understand how users interact with the Service, identify trends, and improve our features, performance, and user experience.
  • Developer analytics: To provide skill publishers with aggregated usage statistics and revenue reports for their published skills.
  • Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Data Sharing and Third Parties

We do not sell your personal information. We share your information only in the following circumstances:

  • Stripe (payment processing): We use Stripe to process all payments. When you make a purchase or receive a payout, your payment information is shared with Stripe in accordance with their Privacy Policy.
  • Supabase (hosting and database): Your account data and usage data are stored in our Supabase-hosted database infrastructure. Supabase processes data in accordance with their Privacy Policy.
  • Skill developers: When you use a skill, the developer of that skill may receive aggregated, anonymized usage data (such as total call counts and general usage patterns). We do not share your personal information with skill developers.
  • Legal requirements: We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect our rights or safety, or investigate potential violations of our Terms.
  • Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Service:

  • Essential cookies: Required for the Service to function, including session management, authentication tokens, and CSRF protection. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with the Service by collecting information anonymously. You may opt out of analytics cookies through your browser settings.
  • Preference cookies: Remember your settings and preferences (such as theme selection) to provide a more personalized experience.

Most web browsers allow you to control cookies through their settings. Note that disabling certain cookies may limit your ability to use some features of the Service.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: Retained for the lifetime of your account. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
  • Usage and API logs: Retained for up to 12 months for analytics and debugging, then aggregated or deleted.
  • Transaction records: Retained for a minimum of 7 years as required by financial regulations and tax law.
  • Communication records: Support tickets and correspondence are retained for up to 3 years after resolution.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right to access: You may request a copy of the personal information we hold about you. You can access most of your data directly through your account settings.
  • Right to correction: You may request that we correct any inaccurate or incomplete personal information.
  • Right to deletion: You may request that we delete your personal information. To delete your account and associated data, email us at support@clawsoup.com. We will process your request within 30 days, subject to legal retention requirements.
  • Right to data portability: You may request a machine-readable copy of your data.
  • Right to object: You may object to certain types of data processing, such as marketing communications.
  • Right to restrict processing: You may request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at support@clawsoup.com. We will respond to your request within 30 days.

7. Security Measures

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it, including:

  • All data in transit is encrypted using TLS (HTTPS).
  • Passwords are hashed using industry-standard algorithms and are never stored in plaintext.
  • API keys are encrypted at rest and can be regenerated at any time from your account dashboard.
  • Database access is controlled through row-level security policies and service role authentication.
  • Payment data is handled exclusively by Stripe and is never stored on our servers in raw form.
  • We conduct regular security reviews and monitor for unauthorized access attempts.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry best practices.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@clawsoup.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate. We take appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or through a notice on the Service. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

See also: Terms of Service · About ClawSoup · Contact Us