One Claw Privacy Policy

Effective date: May 1, 2026

1. Introduction

This Privacy Policy describes how One Claw ("we", "us") handles personal information when you visit https://www.one-claw.io, use our hosted workspace and related services (the "Service"), or contact us.

If you do not agree with this Policy, please do not use the Service.

2. Information we collect

2.1 You provide directly

Depending on how you use the Service, we may collect:

• Account data: Name, email address, password or authentication identifiers (we do not store plaintext passwords in a reversible form where modern hashing applies).
• Billing data: Billing name, address, and payment-related identifiers. Card or bank details are processed by our payment providers; we typically receive tokens or partial data needed to manage subscriptions, not full card numbers stored on our servers.
• Support and communications: Messages you send to support@one-claw.io or through in-product forms, including attachments you choose to provide.
• Workspace content: Text, configuration, prompts, task descriptions, channel-related settings, and similar data you enter or upload while using features we offer.

2.2 Automatically collected

When you use the Service, we may collect:

• Technical and usage data: IP address, approximate location derived from IP, browser type, device type, operating system, timestamps, pages or screens viewed, and diagnostic or error data.
• Cookies and similar technologies: As described in our Cookie Policy.

2.3 From sign-in providers

If you use social or OAuth login (for example Google or GitHub, when enabled), we receive profile information that provider shares with us—commonly email, name, and profile image—according to your consent with that provider.

3. How we use information

We use personal information to:

• Provide, operate, secure, and improve the Service
• Authenticate users and manage accounts and subscriptions
• Process payments and prevent fraud
• Respond to support requests and send service-related notices
• Monitor usage, capacity, and reliability; debug issues
• Comply with legal obligations and enforce our terms

We do not sell your personal information in the conventional sense of selling lists of individuals to advertisers.

4. Legal bases (where GDPR-style rules apply)

Where required, we rely on one or more of: performance of a contract (providing the Service), legitimate interests (security, product improvement, fraud prevention, balanced against your rights), consent (where we ask for it, e.g., certain cookies or marketing), or legal obligation.

5. Sharing and subprocessors

We share information with service providers who process data on our behalf, such as:

• Cloud hosting and database providers
• Payment processors (e.g., Stripe or Creem, depending on configuration)
• Email delivery providers (e.g., for transactional mail)
• Authentication providers when you use their login
• AI and messaging platform APIs when you use features that call them (your prompts or related content may be transmitted according to those providers' policies)

We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer (merger, acquisition, asset sale) subject to appropriate safeguards.

6. International transfers

We and our providers may process data in countries other than your own. Where required, we use appropriate mechanisms (such as standard contractual clauses or equivalent) to govern transfers.

7. Retention

We retain personal information for as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Retention periods vary by data type; for example, billing records may be kept longer for accounting and tax obligations. When data is no longer needed, we delete or de-identify it where feasible.

8. Security

We implement technical and organizational measures appropriate to the risk (e.g., encryption in transit, access controls). No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.

To exercise rights, contact support@one-claw.io. We may need to verify your identity before responding.

10. California residents (CCPA/CPRA summary)

If California law applies, you may have rights to know, delete, and correct personal information, and to opt out of certain sharing that qualifies as "sale" or "sharing" under California law. We do not knowingly sell personal information of minors under 16. Contact us as below to submit requests.

11. Children

The Service is not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take appropriate steps.

12. Marketing

We may send transactional messages (security, billing, product changes) as needed. Promotional emails, if any, will be sent where permitted and with a way to opt out, unless you have already objected as allowed by law.

13. Changes

We may update this Policy by posting a new version on https://www.one-claw.io with an updated effective date. For material changes, we may provide additional notice (e.g., email or in-product).

14. Contact

Privacy questions or requests:

• Email: support@one-claw.io
• Website: https://www.one-claw.io

You may also use Contact if available.

---

Last updated: May 1, 2026