Privacy Policy

We may collect the following personal data:

• Booking information: Name, email address, phone number, and scheduling preferences collected through Cal.com when you book an appointment.
• Payment information: Payment details processed securely through Stripe. We do not store your credit card information on our servers.
• Setup information: Network credentials, account details, and device information necessary to perform the setup, which we access only during the appointment.
• Website analytics: Anonymous usage data collected through Vercel Analytics to understand site traffic and improve the website.
• Communications: Messages sent to us via email, text, or social media during the hypercare and Managed Care support periods.

Under the UK General Data Protection Regulation (UK GDPR), we must have a valid lawful basis for processing your personal data. The bases we rely on are:

• Contract performance: Scheduling and performing your setup appointment, processing payments, and providing post-setup support.
• Legitimate interests: Communicating with you about your service and website analytics to improve our services.
• Legal obligation: Retaining financial records for tax purposes as required by HMRC.

Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms.

• To schedule and perform your setup appointment
• To process payments
• To provide post-setup support during the hypercare period and any Managed Care engagement
• To communicate with you about your service
• To improve our website and services

We do not sell, rent, or share your personal information with third parties for marketing purposes.

We use the following third-party services, some of which may process your data outside the United Kingdom:

• Stripe: Payment processing (United States) — protected by Standard Contractual Clauses
• Cal.com: Appointment scheduling (United States/EU) — protected by Standard Contractual Clauses
• Vercel Analytics: Anonymous website analytics (United States) — protected by Standard Contractual Clauses

Where your data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

During setup, we may temporarily access your network, devices, and accounts as needed to install and configure OpenClaw. We commit to:

• Only accessing information strictly necessary for the setup
• Not copying, storing, or retaining any of your personal files, passwords, or data after the appointment
• Not installing any software beyond what is required for OpenClaw to function

We strongly recommend that you change any passwords or credentials shared with us immediately after the setup is complete.

We retain your personal data only for as long as necessary:

• Booking and contact information: 24 months after the most recent service provided
• Payment and financial records: 7 years, as required by HMRC
• Support communications: 12 months after the end of the relevant support period
• Website analytics data: Aggregated and anonymous — retained indefinitely

After the applicable retention period, your data will be securely deleted or anonymised.

We take reasonable technical and organisational measures to protect your information, but no method of transmission or storage is 100% secure. We cannot guarantee the absolute security of your data.

OpenClaw is designed to run locally on your hardware — your data stays on your machine and is not transmitted to us after the setup is complete.

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request limits on how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests

To exercise these rights, contact us using the details below. We will respond within one month.

Our website uses minimal cookies necessary for functionality. Vercel Analytics collects anonymous, aggregated data and does not use cookies to track individual users.

We do not use advertising cookies or trackers.