Privacy Policy

Last Updated: February 2026

1. What We Collect

Email addresses, only when voluntarily submitted via our waitlist or notification forms. Scan results and metadata including agent name, creator, score, findings, source URLs, and content hashes. Standard web server logs including IP addresses, request timestamps, and user agents. We do not use cookies for tracking purposes.

2. How We Use It

Email addresses are used to send product updates and notifications, with your consent. Scan data is used to provide public security reports, maintain the Verified Agent Registry, and improve our scanning capabilities. Server logs are used for security monitoring, rate limiting, and service improvement.

3. Public Data

Scan results for publicly available open-source skills are treated as public information and are accessible via shareable report URLs. This includes agent names, creators, security scores, and findings.

4. Data Sharing

We do not sell, rent, or trade user data. We may share aggregated, anonymized statistics in blog posts and marketing materials.

5. Third-Party Services

We use Supabase for database hosting and Railway for application hosting. These infrastructure providers process data as part of standard service delivery.

6. Data Retention

Scan data is retained indefinitely as part of the public registry. Email addresses are retained until the user requests removal. Server logs are retained for 30 days.

7. Your Rights

You may request removal of your email address by contacting us. Scan data for publicly available open-source software is maintained as part of the public security record.

8. Security

We implement reasonable security measures including encrypted connections (HTTPS), access controls, and secure credential management.

9. Children's Privacy

ClawSecure is not directed at children under 13. We do not knowingly collect data from children.

10. Changes

We may update this policy. Changes will be noted by updating the "Last Updated" date at the top of this page.

11. Governing Law

This policy is governed by the laws of the United States of America.

12. Contact

Questions about this policy can be directed to [email protected].