🦀 OpenClaw

Privacy Policy

Last updated: February 22, 2026

1. Data Controller

The data controller for OpenClaw as a Service is:
productivity-boost.com Betriebs UG (haftungsbeschrankt) & Co. KG
Reichenbergerstr. 2, 94036 Passau, Germany
Email: florian.standhartinger@gmail.com

2. Data We Collect

We collect and process the following data:

  • Account data: When you sign in with Google, we receive your email address, display name, and Google account identifier.
  • Payment data: When you subscribe, Stripe processes your payment information. We store your Stripe customer ID and subscription status but never your card details.
  • Waitlist data: If you join the waitlist, we store your email address, IP address, and user agent.
  • Usage data: We log API usage, instance events, and chat messages to provide and improve the service.
  • Instance data: Files you upload to your OpenClaw instance and any data created during your sessions.

3. Cookies

We use a single session cookie (oc-session-id) to keep you signed in. This cookie is strictly necessary for the service to function and is configured as httpOnly, secure, and sameSite=lax. We do not use analytics, advertising, or tracking cookies.

4. How We Use Your Data

  • To authenticate you and maintain your session
  • To provision and manage your OpenClaw instances
  • To process payments through Stripe
  • To communicate with you about your account and service updates
  • To improve the reliability and security of the service

5. Third-Party Processors

We share data with the following processors only as needed to provide the service:

  • Google — Authentication via Google Identity Services
  • Stripe — Payment processing
  • Neon — PostgreSQL database hosting
  • Render — Application hosting
  • AI inference providers — Your configured AI provider (e.g. Chutes, OpenAI, Anthropic) processes requests from your OpenClaw instance

6. AI Processing

Your OpenClaw instance runs in a hardware-isolated environment. Interactions with the AI are processed through your configured inference provider. We do not use your instance data or chat history to train AI models.

7. Data Retention

  • Session data: automatically deleted after 7 days of inactivity
  • Account data: retained until you request deletion
  • Instance data: retained while your subscription is active; deleted after account closure
  • Waitlist data: retained until you unsubscribe or request deletion

8. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure of your data
  • Request data portability
  • Object to processing
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at florian.standhartinger@gmail.com.

9. Abuse Reports and Enforcement

When we receive abuse reports, we may store and process the report details for enforcement and legal compliance. This may include an optional reporter email address, submitted evidence, and the reporter IP address where technically available.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.