Privacy Policy

UpClaw ("we," "our," or "us") operates the UpClaw iOS application and website at upclaw.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the practices described in this policy.

If you do not agree with the terms of this Privacy Policy, please discontinue use of the Service immediately.

We collect the following categories of information:

a) Account Information

When you create an account, we collect your email address and authentication credentials via Firebase Authentication (Google LLC). We may also collect your name if provided.

b) Usage and Configuration Data

We collect information about how you configure and interact with your AI assistant, including: assistant name, chosen AI model, communication style preferences, selected server region, connected messaging integrations (e.g., Telegram channel identifiers), and onboarding flow selections.

c) Subscription and Purchase Data

Subscription management is handled by RevenueCat, Inc. We receive subscription status, purchase timestamps, and entitlement data. Payment processing is handled entirely by Apple; we do not collect or store payment card information.

d) Analytics and Diagnostics

We collect anonymized usage events (screen views, feature interactions, errors) via Firebase Analytics and Firebase Crashlytics to improve the Service. This data may include device type, OS version, app version, and session duration.

e) Log Data

Our servers automatically record log data when you use the Service, including IP address, timestamps, request parameters, and error logs. Log data is retained for up to 90 days.

f) AI Conversation Data

Messages you send to your AI assistant are processed by the AI provider you select (OpenAI, Anthropic, or Google). We do not store the content of your AI conversations on our servers beyond what is necessary for real-time message delivery. Please review the privacy policies of the respective AI providers for how they handle your data.

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Provision and manage your personal AI bot server in your selected region;
• Process transactions and send related notices;
• Send administrative messages, technical notices, and security alerts;
• Respond to customer support requests;
• Monitor and analyze usage patterns to improve and develop the Service;
• Detect, prevent, and address technical issues, fraud, and abuse;
• Comply with legal obligations;
• Enforce our Terms of Use and protect the rights, property, or safety of UpClaw, our users, and the public.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

The Service integrates with the following third-party services, each governed by their own privacy policies:

• Firebase (Google LLC) — authentication, analytics, crash reporting, and real-time database. See Firebase Privacy.
• RevenueCat, Inc. — subscription management and entitlement tracking. See RevenueCat Privacy.
• OpenAI, L.L.C. — AI language model API (optional). See OpenAI Privacy.
• Anthropic, PBC — AI language model API (optional). See Anthropic Privacy.
• Google LLC (Gemini) — AI language model API (optional). See Google Privacy.
• Telegram Messenger Inc. — messaging integration. Bot tokens are stored on your provisioned server. See Telegram Privacy.
• Apple, Inc. — payment processing and app distribution. See Apple Privacy.

Your bot server is hosted in the region you select during onboarding (United States, European Union, United Kingdom, or Asia). Account and configuration data is stored in Firebase infrastructure managed by Google.

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

In the event of a data breach that affects your rights and freedoms, we will notify affected users in accordance with applicable law.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or legitimate business necessity (e.g., fraud prevention, legal disputes).

Server log data is retained for up to 90 days. Anonymized analytics data may be retained indefinitely.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data (right to be forgotten).
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing of your data.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@upclaw.app. We will respond within 30 days. We may request identity verification before processing your request.

EU/EEA residents may lodge a complaint with their local supervisory authority if they believe we have not complied with applicable data protection law.

The Service is not directed to, and we do not knowingly collect personal data from, individuals under the age of 17. If we become aware that we have inadvertently collected personal data from a child under 17, we will delete such data promptly. If you believe we have collected such data, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ. By using the Service, you consent to such transfers. Where required by law, we apply appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

California residents have the right to: know what personal information is collected, used, shared, or sold; delete personal information; opt-out of the sale of personal information; and non-discrimination for exercising privacy rights. We do not sell personal information. To exercise your rights, contact privacy@upclaw.app.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you within the app or by email. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: