Privacy Policy
Last updated: April 21, 2026
This Privacy Policy explains how PapayaClaw ("we", "us", or "our") collects, uses, discloses, and protects your information when you use our platform to deploy and manage OpenClaw AI agent instances (the "Service"). By using the Service, you agree to the practices described here.
1. Data we collect
We collect the following categories of information: (a) Account data — your name, email address, and profile image provided by your authentication provider (e.g., Google) when you sign in; (b) Usage data — the AI agent instances you create, configurations, subscription plan, and deployment activity; (c) Payment data — processed by our payment provider (Stripe); we do not store full card details on our servers; (d) Technical data — IP address, browser type, device information, and cookies required to operate the Service.
2. How we use your data
We use your data to: (a) create and manage your account; (b) deploy, run, and bill your AI agent instances; (c) communicate about your subscription, security notices, and product updates; (d) prevent abuse and fraud; (e) improve the Service through aggregated analytics. We do not sell your personal data to third parties.
3. Sharing and third parties
We share limited data with service providers strictly necessary to operate the Service: authentication (Google OAuth), payments (Stripe), cloud infrastructure, and error monitoring. Each provider handles data under their own terms. We may also disclose data if required by law or to protect our rights and users.
4. Data retention
We retain your account data while your account is active. When you delete your account, we remove personal data within 30 days, except where retention is required by law (e.g., tax and billing records kept for up to 7 years) or needed to resolve disputes.
5. Your rights
Depending on your jurisdiction (including GDPR and CCPA regions), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email us at [email protected].
6. Security
We use industry-standard measures including TLS encryption in transit, encrypted storage at rest, scoped access controls, and audit logging. No system is 100% secure, but we work continuously to protect your data and will notify affected users of any breach as required by law.
7. Cookies
We use strictly necessary cookies for authentication and session management, and optional cookies for analytics. You can control cookies through your browser settings. Disabling necessary cookies may prevent you from signing in.
8. Children
The Service is not directed to individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced via email or in-product notice at least 14 days before taking effect. Continued use of the Service after the effective date constitutes acceptance.
10. Contact us
Questions about this policy or your data? Email us at [email protected].