Privacy at UnlockClaw

1. Introduction

UnlockClaw ("we," "us," or "our") operates the website unlockclaw.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI assistant services. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

• Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture as provided by Google. We do not receive or store your Google password.
• Deployment Configuration: Information you provide to configure your AI assistant, including Telegram bot tokens and channel identifiers.
• API Keys and Credentials: You may provide third-party API keys (such as AI provider keys) to power your deployment. These keys are encrypted at rest and stored in isolated, access-controlled environments. We never share, sell, or use your API keys for any purpose other than powering your specific deployment.
• Service and Server Data: We collect technical information about server performance, uptime, error rates, and resource utilization to monitor and improve the reliability of our Service. We do not track your personal browsing activity across other websites or collect personal data beyond what is necessary to operate your deployment.
• Billing Information: Credit usage, top-up history, and transaction records. Payment processing is handled by third-party processors; we do not store full credit card numbers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provision, maintain, and operate your AI assistant.
• To authenticate your identity and manage your account.
• To process transactions and manage your credit balance.
• To communicate with you about your account, deployments, and service updates.
• To detect, prevent, and address technical issues, fraud, and security incidents.
• To improve and optimize the Service, including analyzing usage patterns and performance metrics.
• To comply with legal obligations and enforce our terms.
• We do not sell, rent, lease, or trade your personal information, API keys, deployment data, or any other data to third parties — ever.

We Do Not Sell Your Data

UnlockClaw does not sell, rent, or trade your personal information to any third party for any reason. Your data is used solely to operate and improve the Service. We do not monetize your data, share it with advertisers, or use it for profiling purposes. Your trust is paramount to us.

4. API Keys and Credential Security

We understand the sensitivity of API keys and credentials you entrust to us. We implement the following safeguards:

• Encryption at Rest: All API keys and sensitive credentials are encrypted using industry-standard AES-256 encryption before storage.
• Isolated Environments: Each deployment runs in an isolated cloud environment with scoped access controls, preventing cross-tenant data access.
• Minimal Access: API keys are only decrypted and used at runtime within your isolated deployment environment. Our staff does not have routine access to your plaintext keys.
• No Sharing: We never share, sell, license, or use your API keys for any purpose beyond operating your specific deployment.
• Deletion on Request: When you delete a deployment or your account, associated API keys and credentials are permanently purged from our systems within 30 days.

5. Third-Party Services

The Service may integrate with or rely on the following third-party services:

• Google OAuth: For authentication. Subject to Google's Privacy Policy.
• AI Providers: Your API keys are used to connect your assistant to your chosen AI provider. Their use of data is governed by their respective privacy policies.
• Telegram: For bot connectivity. Subject to Telegram's Privacy Policy.
• Cloud Infrastructure Providers: We use cloud services to host deployments. Data is processed according to our agreements with these providers.
• Payment Processors: Payment information is handled by PCI-compliant third-party processors.

We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

6. Cookies and Tracking

We use essential cookies required for authentication and session management. We may also use analytics cookies to understand how users interact with our Service. You can control cookie preferences through your browser settings, though disabling essential cookies may affect Service functionality.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law, for legitimate business purposes (e.g., fraud prevention), or to resolve disputes. Deployment logs may be retained in anonymized form for up to 90 days for service improvement purposes.

8. Data Security

We implement industry-standard security measures to protect your information, including TLS encryption in transit, AES-256 encryption at rest, regular security audits, access controls, and monitoring. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing of your data.

To exercise any of these rights, please contact us at support@unlockclaw.com.

10. Children's Privacy

The Service is not directed to individuals under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@unlockclaw.com