Privacy Policy

Last updated: February 2025

1. Introduction

At SudoClaw, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. By using SudoClaw, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

  • Account Information: Email address, name, and organization details when you create an account
  • Usage Data: Information about how you use our services, including agent deployments, API calls, and feature usage
  • Agent Data: Configuration and metrics from your OpenClaw instances (as you configure)
  • Telegram Data: If you link your Telegram account, we store your chat ID for notification purposes
  • Log Data: Server logs, IP addresses, browser types, and timestamps

3. How We Use Your Information

We use the collected information for:

  • Providing and improving our services
  • Processing payments and managing subscriptions
  • Sending administrative messages and updates
  • Providing Telegram bot notifications (if enabled)
  • Analyzing usage patterns to enhance user experience
  • Detecting and preventing fraud or abuse

4. Data Storage and Security

Your data is stored on Cloudflare's global network using:

  • Cloudflare D1 (database) for structured data
  • Cloudflare KV for session and cache data
  • Cloudflare R2 for file storage

All data is encrypted in transit using TLS 1.3. Sensitive credentials (API keys, tokens) are encrypted at rest using AES-256.

5. Third-Party Services

We use the following third-party services:

  • Cloudflare: Hosting, CDN, and security services
  • Polar.sh: Payment processing and subscription management
  • Telegram: Bot notifications (only if you enable Telegram integration)

6. Data Retention

We retain your data as follows:

  • Account data: Retained until account deletion
  • Agent metrics: Retained according to your plan (7-90 days)
  • Audit logs: Retained for 1 year
  • Backups: Retained for 30 days

7. Your Rights

You have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Export: Request export of your data in a portable format
  • Opt-out: Disable Telegram notifications at any time

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@sudoclaw.dev.