Privacy Policy

Last Updated: September 2026

1. What We Collect

Email addresses, only when voluntarily submitted via our waitlist, notification or contact forms. If you use our contact form, we also collect the topic you choose, your name, your email address, your company (optional) and your message. Scan results and metadata including agent name, creator, score, findings, source URLs, and content hashes. For subscribers to AI-Powered Runtime Monitoring (the Shield, Sentinel, and Fortress tiers), the ClawSecure daemon sends component metadata, file hashes, and configuration summaries to our cloud for AI-powered security analysis by your AI CISO™; your API keys, credentials, and source code never leave your machine. Standard web server logs including IP addresses, request timestamps, and user agents. We do not use cookies for tracking purposes.

2. How We Use It

Email addresses are used to send product updates and notifications, with your consent. Contact form messages are used only to reply to you. They are delivered by email to the ClawSecure team responsible for the topic you choose. When you send a message, we email you a short confirmation that we received it. Scan data is used to provide public security reports, maintain the Verified Agent Registry, and improve our scanning capabilities. Server logs are used for security monitoring, rate limiting, and service improvement.

3. Public Data

Scan results for publicly available open-source skills are treated as public information and are accessible via shareable report URLs. This includes agent names, creators, security scores, and findings.

4. Data Sharing

We do not sell, rent, or trade user data. We may share aggregated, anonymized statistics in blog posts and marketing materials.

5. Third-Party Services

We use third-party service providers to operate ClawSecure: a cloud database and authentication provider, a cloud application hosting provider, and a transactional email delivery provider (for example, waitlist confirmations and contact form messages). These providers process data only as part of standard service delivery. We also use a bot-protection service on our forms to block automated abuse. We also use Google Analytics (GA4) for anonymized site-usage analytics, which sets cookies to measure how visitors interact with the site.

6. Data Retention

Scan data is retained indefinitely as part of the public registry. Email addresses are retained until the user requests removal. Contact form messages are kept in our email system for as long as needed to handle your inquiry. Server logs are retained for 30 days.

7. Your Rights

You may request removal of your email address by contacting us. Scan data for publicly available open-source software is maintained as part of the public security record.

8. Security

We implement reasonable security measures including encrypted connections (HTTPS), access controls, and secure credential management.

9. Children's Privacy

ClawSecure is not directed at children under 13. We do not knowingly collect data from children.

10. Changes

We may update this policy. Changes will be noted by updating the "Last Updated" date at the top of this page.

11. Governing Law

This policy is governed by the laws of the United States of America.

12. Contact

Questions about this policy can be directed to us through our contact page.

1209 Orange Street, Wilmington, DE 19801, United States of America.