Privacy Policy

This policy describes what personal data UncommonClaw collects, why, and what you can do about it.

What we collect

• Account data: email, hashed password, role, sign-up time, workspace metadata.
• Content you give us: chat messages, business profile, uploaded files, helper configurations.
• Usage data: API calls made by your helpers, timestamps, IP addresses for signup and sensitive actions.
• Billing data (paid plans): handled by Stripe. We store customer and subscription IDs only.
• Integration tokens: OAuth access and refresh tokens for the services you connect (Gmail, Slack, etc.). Scoped and revocable.

Why we collect it

• To run the Service you asked us to run.
• To keep accounts secure (rate limits, abuse detection, audit logs).
• To bill correctly (paid plans only).
• To improve the product — aggregated and de-identified usage only.
• To meet legal obligations.

Who we share it with

• Foundation model providers (MiniMax, Anthropic, etc.) — prompts and responses are relayed as needed. Where possible we disable training on your data.
• Infrastructure — our hosting provider, email provider (Postmark), Stripe for payments. Each is bound by a data-processing agreement.
• Law enforcement — only when legally required and, where possible, with notice to you.

We do not sell your data. We do not share it for advertising.

Where we store it

Primary storage is in Canada. Foundation-model providers may process your content in their own regions (US, EU); you can review provider regions in our docs.

How long we keep it

• Chat history: until you delete it or your workspace is deleted.
• Audit logs and outbound logs: 90 days.
• Billing records: as required by tax law (typically 6 years in Canada).

Your rights

• Export your data from the Account page (GET /api/export).
• Delete your workspace by emailing support@uncommonclaw.com. We process within 30 days.
• Correct inaccurate information by editing it in the dashboard.
• Object to specific processing by emailing us; we respond within 30 days.

Cookies and tracking

We use a single session cookie (uclaw_session) to keep you signed in. No third-party analytics trackers on the dashboard. The splash site may use privacy-respecting analytics (Plausible or similar) to understand aggregate traffic.

Children

The Service is not intended for children under 16. We do not knowingly collect data from them.

Contact

Privacy questions: privacy@uncommonclaw.com. General support: support@uncommonclaw.com.