Privacy Policy

Version 2026-10-10. This policy explains what FreeClaw Hosted (the "Service"), provided by Laura DeBruin and run by Elliot DeBruin, collects, why, who else sees it, and how long it's kept. Our Security page goes into more detail about the server itself.

What we collect

- Your account: username, a hashed password (never the password itself), email address if you give one, which plan you're on, whether you said you were under 18, and when you (and, for 13 to 17 year olds, a parent or guardian) agreed to our Terms.
- Payments: Stripe handles your card. We never see or store card numbers; we receive a customer ID, the subscription's status and dates, and the amounts paid.
- What you put in the Service: your messages to the agent and its replies, files you upload and files it makes, its saved notes about you, scheduled jobs, profile names and settings, and website logins you make in the agent's browser (saved as browser cookies).
- Connected apps: if you connect apps through Composio or another provider, the agent can read and act in them on your instructions. The sign-in for those is held by that provider, not by us.
- Your iPhone's calendar, reminders and contacts: if you use the FreeClaw iOS app and allow it, the agent can read and change these when you ask it to. The app does the work on your phone and sends the agent only what that request needs (for example, the events in the days you asked about, or the contacts matching a name). That goes into your conversation like any other tool result. We don't copy or sync your calendar, reminders or address book. You can withdraw access at any time in your iPhone's Settings → FreeClaw.
- Enterprise inquiries: if you send the Enterprise contact form, your name, work email, company, team size and message, so we can reply and set it up with you. We keep them until the conversation is over or you ask us to delete them.
- Usage: how many calls and tokens your account used, for your allowance and our costs.
- Technical: when you sign up for the free plan or send the Enterprise form we keep a one-way, keyed hash of your IP address (not the address itself), only to limit sign-ups and forms per address (a form's is dropped after a day). Our servers' logs record errors and operational events, never your messages, files or what tools returned, and they're deleted after 7 days. Our web server also logs each request (IP address, time and the page requested) for 7 days, to keep the site running and secure.

We don't use analytics, advertising or tracking cookies, session recording, or any third-party scripts or fonts in your browser. The only cookie is the one that keeps you signed in.

How we use it

To run the Service for you; to bill you and enforce plan limits; to send you account emails (confirming your address, telling you before an intro offer turns into the full price, warning before an unused free account is deleted); to keep the Service secure and fix problems; and to follow the law. We don't sell your information, share it for advertising, or use your content to train AI models.

Help improve FreeClaw: if you switch this on in Settings, the developer can read your account's conversations and files to find bugs and improve the Service. It's off unless you turn it on, and you can turn it off at any time. Otherwise, we don't look at your content except to investigate a problem you report, or as the law requires.

Who else processes it

Running an AI agent means sending your content to other companies. By using the Service you consent to this:
- OpenAI (the AI model) and TypeSafe (Jev, which decides which tools and notes each message needs) receive your messages and what the agent's tools return, to produce each reply.
- Stripe processes payments.
- Cloudflare sits in front of our website; all traffic, including your IP address, passes through it.
- Linode/Akamai hosts our server.
- Webshare provides the internet addresses your agent's browser uses. Pages it opens go through Webshare's proxy servers, so websites see a Webshare address instead of our server's. For secure (https) sites, Webshare can see which site is visited and when, but not the pages, your logins or anything typed, which stay encrypted; for the rare plain (http) site it can see the traffic.
- Resend delivers our emails.
- Apple delivers notifications and calls to the FreeClaw iPhone app, if you use it; a notification carries the text of what your agent is telling you.
- Composio, Discord and Microsoft (Teams) if you choose to connect or link them. A chat service you link sees the messages you exchange with your agent there.
- Websites the agent visits for you see the visits, coming from one of those proxy addresses (or from our server when no proxy is available). Web searches and pages the agent fetches without its browser come from our server.

Each of these has its own privacy policy. We may also disclose information if the law requires it, to protect someone's safety, or as part of a transfer of the Service to a new owner (who would be bound by this policy).

How long we keep it

Your content stays until you delete it. Deleting a file, an archived conversation or a whole agent removes it from our server straight away; clearing a chat moves it to that agent's archive, where you can delete it. You can also turn on automatic deletion of week-old files in Settings. Free accounts unused for 60 days are deleted after a warning email. Server logs are deleted after 7 days. Our server is backed up, so deleted data can remain in a backup for up to 14 days. When you close your account we delete its data, except billing records we must keep for tax and accounting.

To make replies faster and cheaper, we ask OpenAI to keep a cached copy of a conversation's recent context for up to 24 hours, so the next message doesn't have to send it all again; we tell OpenAI not to store the conversations themselves. OpenAI, TypeSafe and the other companies above keep data under their own policies.

Your choices and rights

You can view, download, change and delete your content in the Service; cancel your subscription from your dashboard; delete your account yourself, from the dashboard or the FreeClaw iOS app (Settings → Delete Account); and ask us, at [email protected], for a copy of your account information or to correct it. Depending on your state, you may have further rights over your personal information; write to us and we'll honor them. We don't treat you differently for using them.

Do Not Track: we don't track you across other websites, so there is nothing for a Do Not Track signal to switch off.

Children

The Service isn't for children under 13, and we don't knowingly collect their information. Users aged 13 to 17 need a parent or guardian's agreement. A parent or guardian can write to [email protected] to see or delete their child's account. If we learn an account belongs to someone under 13, we delete it.

Security

Your data is stored on an encrypted disk, passwords are hashed, and connections are encrypted. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

Changes

If we change this policy materially, we'll tell you before the change applies. The version and date are at the top.

Contact

Laura DeBruin, run by Elliot DeBruin
[email protected] · (223) 221-0786