← Back to home

Privacy Policy

Last updated: February 26, 2026

RunMyClaw (“we”, “us”, “our”) operates runmyclaw.ai. This policy explains what data we collect, how we use it, and your rights.

1. Data we collect

When you sign in with Google, we receive:

  • Your email address
  • Your display name
  • Your profile picture URL

If you sign up with email/password, we store your email address and a securely hashed password. We never store your password in plain text.

When you subscribe, Stripe processes your payment details. We never see or store your card number.

2. How we use your data

  • Your email: to manage your account and send transactional emails (receipts, status updates)
  • Your name and profile picture: to personalize your dashboard
  • Server configuration: to provision and display your dedicated VPS on the dashboard

We do not use your data for advertising, retargeting, or any purpose unrelated to providing the RunMyClaw service.

3. Data storage & security

Your data is stored in our Supabase database with row-level security enabled. All data is encrypted at rest and transmitted over TLS. Access to production systems is restricted to authorized personnel only.

4. Your server & your data

Each customer gets a dedicated VPS hosted by Hetzner Cloud. Your AI conversations and data stay on your own server. We do not access, read, or store your conversations. When you cancel, your server and all data on it are permanently deleted within 24 hours.

5. API keys

When you provide an AI provider API key, it is transmitted over HTTPS directly to your dedicated server and written to a protected configuration file (root-only access, permission 0600). RunMyClaw does not store, log, or retain your API keys in our database or any other system. We cannot retrieve your key after it is delivered to your server. Your key exists only on your dedicated VPS. When you cancel your subscription, your server and all data on it — including your API keys — are permanently deleted within 24 hours.

6. Data sharing

We do not sell, trade, or transfer your personal data to third parties. We share data only with the following service providers, strictly to operate the service:

  • Supabase — authentication & database hosting
  • Stripe — payment processing
  • Hetzner Cloud — VPS provisioning
  • Vercel — website hosting

7. Data retention & deletion

We retain your account data for as long as your account is active. When you cancel your subscription, your server is deleted within 24 hours. Your account data (email, name) is retained for 30 days after cancellation for support purposes, then permanently deleted.

You can request immediate deletion of all your data at any time by emailing support@runmyclaw.ai.

8. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct or update your data
  • Request deletion of your data
  • Revoke Google account access at any time via your Google Account settings

To exercise any of these rights, email support@runmyclaw.ai.

9. Cookies

We use essential cookies for authentication only. We do not use tracking cookies, analytics, or third-party advertising cookies.

10. Google API Services

RunMyClaw's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

11. Changes to this policy

If we make material changes to this policy, we will notify you by email at least 7 days before the changes take effect. Continued use of the service after changes constitutes acceptance.

12. Contact

Questions or concerns? Email support@runmyclaw.ai