Legal
Privacy Policy
Effective date: March 28, 2026
At MyClawBots, we take your privacy seriously. This policy explains how we collect, use, store, and protect your personal information when you use our platform and services. By using MyClawBots, you agree to the practices described in this policy.
1. Information We Collect
We collect information you provide directly when you create an account, set up projects, or contact us. This includes your name, email address, and any API keys or integration credentials you configure.
We also collect usage data automatically, including pages visited, features used, project activity, and technical information such as browser type, IP address, and device identifiers.
2. How We Use Your Information
We use your information to provide, maintain, and improve our services, including provisioning agent spaces, managing integrations, and delivering chat functionality.
We may also use your information to communicate with you about service updates, security alerts, and promotional content (with your consent where required).
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3. Data Storage & Security
All data is stored on secure, encrypted infrastructure. API keys and integration secrets are encrypted at rest and never exposed in logs, prompts, or the dashboard UI after saving.
Each project operates in an isolated cloud environment. Data from one project is never accessible to another project or user.
We implement industry-standard security measures including TLS encryption in transit, regular security audits, and access controls.
4. Agent Spaces & Isolation
Each agent space is a fully isolated environment. Your conversations, configuration, and connected integrations are private to your project.
We do not use your project data, conversations, or prompts to train any AI models.
When you destroy a project's runtime, the associated cloud environment and data are permanently removed.
5. Third-Party Services
Our service integrates with third-party providers (e.g., OpenAI, Anthropic, GitHub, Meta/Facebook, Instagram) based on your configuration. Your interactions with these services are governed by their respective privacy policies.
We only share the minimum information necessary with third-party services to deliver the functionality you request.
6. Social Media Integration (Facebook & Instagram)
When you connect your Facebook or Instagram account to MyClawBots, we request specific permissions to enable social media management features through your AI agents. The data we access and how we use it is described below.
Data We Collect From Meta: When you authorize the connection, we receive and store: (a) your Facebook User ID and profile name; (b) a list of Facebook Pages you manage, including Page names and IDs; (c) Page access tokens (encrypted at rest) for publishing on your behalf; (d) linked Instagram Business account IDs and usernames; and (e) a long-lived user token (encrypted at rest) for re-enumerating your Pages if needed.
How We Use This Data: We use your Facebook and Instagram data solely to: (a) publish posts to your Facebook Pages and Instagram Business accounts when you instruct your AI agent to do so; (b) retrieve your recent posts and engagement metrics (likes, comments, shares) so your agent can analyze performance; (c) read Page-level insights (impressions, reach, follower growth) to help your agent recommend content strategy; (d) read comments on your posts so your agent can understand audience feedback; and (e) delete posts when you instruct your agent to do so.
We never post to your accounts without your explicit instruction. Your AI agent will always show you a preview and ask for confirmation before publishing.
We do not sell, share, or use your Facebook or Instagram data for advertising, profiling, or any purpose other than providing the social media management features you have explicitly authorized.
Your social media tokens are encrypted using AES-256-GCM encryption at rest and are never exposed in the dashboard UI, logs, or to your AI agent directly. All API calls to Meta are made server-side through our secure proxy.
7. Data Deletion (Facebook & Instagram)
You can disconnect your Facebook and Instagram accounts at any time through Settings → Social Media in the dashboard. When you disconnect, your access tokens are immediately cleared and the account is deactivated.
When you remove the MyClawBots app from your Facebook settings (Settings → Business Integrations), Meta sends us a data deletion callback. Upon receiving this callback, we permanently delete all stored data associated with your Facebook User ID, including all Page tokens, Instagram tokens, and the user token.
You can also request complete deletion of all your social media data by contacting us at privacy@myclawbots.com. We will process deletion requests within 30 days.
Post audit logs (records of posts made through the platform) are retained for your records and can be deleted upon request.
8. Cookies & Tracking
We use essential cookies to maintain your session and authentication state. These are necessary for the service to function.
We may use analytics cookies to understand how our service is used and to improve the user experience. You can opt out of non-essential cookies through your browser settings.
9. Data Retention
We retain your account information for as long as your account is active. Project data is retained until you delete the project or your account.
Social media tokens are retained until you disconnect the account or remove the app from Facebook. Post audit logs are retained according to your plan's retention period.
Audit logs are retained according to your plan's retention period. After this period, logs are automatically purged.
You can request deletion of your account and all associated data at any time by contacting us.
10. Your Rights
You have the right to access, correct, or delete your personal information. You can manage most of this directly through your dashboard settings.
You have the right to export your data in a portable format upon request.
You have the right to revoke any third-party integrations (including Facebook and Instagram) at any time through the dashboard or through the third-party's own settings.
If you are located in the European Economic Area (EEA), you have additional rights under the GDPR, including the right to restrict processing and the right to data portability.
11. Children's Privacy
Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date.
Your continued use of the service after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us at privacy@myclawbots.com.