This Privacy Policy explains how CruzClaw Cloud ("CruzClaw", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit our website, use our platform, or interact with our AI employees and virtual machine services.
1. Information We Collect
We may collect the following categories of information:
- Account Information: Name, email address, password hash, billing address, payment details, and company information when you register or subscribe.
- Usage Data: Logs of interactions with AI employees, workflow executions, API calls, feature usage, and dashboard activity.
- Technical Data: IP address, browser type, device identifiers, operating system, cookies, and diagnostic data for service delivery and security.
- VM & Deployment Data: Virtual machine identifiers, resource usage (CPU, RAM, storage), deployment status, and OpenClaw container telemetry.
- Third-Party Integrations: Data you choose to connect through channels such as WhatsApp, Microsoft Teams, email, or custom APIs.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the CruzClaw platform and AI employee services.
- Provision and manage virtual machines, OpenClaw containers, and network resources.
- Process payments, manage credits, subscriptions, and billing.
- Improve product performance and support customers.
- Communicate updates, security alerts, and marketing messages (with opt-out options).
- Detect fraud, abuse, and security threats, and enforce our Terms of Service.
3. Data Sharing and Disclosure
We do not sell your personal data. We may share information with:
- Service Providers: Hosting, payment, analytics, and communication providers under strict confidentiality agreements.
- AI Providers: All AI employee processing is routed through OpenRouter, which forwards requests to the provider hosting the model selected for your workspace. See the OpenRouter model catalog for the models available in CruzClaw. Only the content required to generate your requested response is transmitted, and payment or account credentials are never shared with AI providers.
- Legal Authorities: When required by law, court order, or to protect our rights and users.
4. Google Workspace Data and Artificial Intelligence
CruzClaw accesses Google Workspace data only after you expressly connect your Google account and grant the requested permissions. Depending on the services connected, this data may include account identity information, email messages, contacts, calendar events, and related metadata.
CruzClaw uses this information solely to provide features you request, including email assistance, contact synchronization, calendar management, meeting coordination, summaries, reminders, and other executive assistant functions.
CruzClaw may securely transmit the minimum information required to approved artificial intelligence service providers to generate responses or complete actions requested by you. Google Workspace data, including raw data and information derived from it, is not used to create, train, or improve foundational or generalized artificial intelligence or machine learning models.
CruzClaw does not sell Google Workspace data, use it for advertising, use it to determine creditworthiness, or transfer it to data brokers. AI processing of Google Workspace data is routed exclusively through OpenRouter to the provider hosting the selected model. Providers receive only the content required to generate responses or complete actions you request, and their API terms prohibit training on API-submitted data without explicit customer opt-in. Where a provider exposes controls to disable training or limit data retention, CruzClaw enables them; otherwise processing is limited to what that provider's API terms permit. Access is restricted to the processing necessary to deliver the requested user-facing functionality.
Human access to Google Workspace data is prohibited except when specifically authorized by you, required to investigate security or abuse, necessary to resolve a user-reported technical issue, or required by applicable law.
What CruzClaw stores: When you connect Google services, CruzClaw stores your connected account identifier (such as your Gmail address) and your OAuth tokens. Tokens are encrypted in a dedicated credential store and are never stored in plain text. For connected Gmail, CruzClaw stores copies of processed messages — including sender, recipients, subject, body, and provider message identifiers — to operate inbox assistance, summaries, follow-ups, and send approvals. Google Contacts that you sync are stored in your CruzClaw contact book (names, email addresses, phone numbers, company, and job title) together with the Google resource identifier used for synchronization. Google Calendar events are read from Google when needed to answer your requests and are not stored persistently by CruzClaw. Information your AI employee derives from Google data — such as summaries, commitments, notes, and conversation history — persists in your workspace as part of the persistent work context feature and is retained as described in Section 5.
You may disconnect your Google account from CruzClaw at any time. Disconnecting a channel immediately deletes its OAuth tokens and the cached email content stored for that channel from CruzClaw's production systems; synced contacts and derived notes remain until you delete them or request deletion. You may also revoke CruzClaw's permissions through your Google Account security settings, which stops further access regardless of the CruzClaw-side state. To delete all stored Google Workspace data, including derived notes and conversation history, delete your account or contact [email protected]; account deletion removes the data without undue delay, subject to limited legal or billing retention obligations.
CruzClaw's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. AI conversation logs may be retained for 30 to 90 days depending on your plan and legal obligations. Google Workspace-derived information in your AI employee's notebook (summaries, commitments, and notes) persists while your account is active because it forms the persistent work context you asked your employee to maintain. Disconnecting a Google integration removes that channel's tokens and cached content immediately, as described in Section 4. When you delete your account, your data is deleted from production systems without undue delay, subject to limited legal or billing retention requirements. You may request deletion of your account and associated data at any time.
6. Security Measures
We implement industry-standard security measures including encryption in transit (TLS 1.2+), hashed passwords, network isolation between customer VMs, firewall rules, and access controls. However, no internet-based system can be 100% secure, and we cannot guarantee absolute security.
7. Your Privacy Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of your personal data. For EU users, please see our GDPR page for additional rights.
8. Cookies
We use cookies and similar technologies to operate the site, remember preferences, and analyze usage. See our Cookie Policy for more details.
9. Children's Privacy
CruzClaw is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the website.
11. Contact Us
If you have questions about this Privacy Policy or your data rights, please contact us at [email protected].