Privacy Policy

1. Who We Are

This Privacy Policy explains how OpenClaw Intelligence B.V. ("OpenClaw," "we," "us," or "our") collects, uses, stores, and protects your personal data when you visit our website, use our services, or otherwise interact with us.

OpenClaw Intelligence is the data controller responsible for the processing of your personal data as described in this policy. We are subject to the European Union's General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet Algemene Verordening Gegevensbescherming (UAVG).

2. What Data We Collect

We collect different categories of personal data depending on how you interact with us:

2.1 Account & Profile Data

When you sign up for our services or book a consultation, we collect:

• Full name, email address, phone number
• Company name, website, industry, company size
• Password (stored as a hashed, salted value — we never store plaintext passwords)
• Profile photo (if uploaded)
• Automation goals and project descriptions you provide

2.2 Payment & Billing Data

When you purchase services, we collect:

• Billing name and address
• VAT number (if provided)
• Payment method details (credit card, SEPA, PayPal)

2.3 Usage & Technical Data

When you visit our website, we automatically collect:

• IP address (anonymized where possible)
• Browser type, version, and operating system
• Device type and screen resolution
• Pages visited, time spent, click patterns, and referral source
• Cookies and similar identifiers (see Section 5)

2.4 Communication Data

Our pipeline enquiry form collects your name, email address, optional company name, and the process, tools, outcome and service you describe. We use this information to respond to your enquiry and send you a confirmation copy through our transactional email provider, SendPulse. Submitting the form does not subscribe you to marketing. Please do not include passwords or other sensitive business information.

When you contact us, we collect:

• Email correspondence and support tickets
• Meeting recordings and notes (with your prior consent)
• Feedback and survey responses

2.5 AI Agent & Service Data

When you use our AI agent services, we may process:

• Configuration data for your AI agents
• Task logs, performance metrics, and error reports
• Integrations and connected tool metadata (e.g. CRM, email providers)

3. How We Use Your Data

We use your personal data for the following purposes:

• Service delivery: To create and manage your account, process payments, deliver the services you purchase, and schedule consultations and meetings.
• Platform functionality: To operate our website and dashboard, authenticate your identity, and provide access to your AI agent management tools.
• Service optimization: To monitor, analyze, and improve the performance of our services, AI agents, and website. This includes using aggregated usage data to identify trends and improve user experience.
• Communication: To send you transactional emails (invoices, booking confirmations, password resets), service updates, and — with your consent — marketing communications about new features or offerings.
• Security & fraud prevention: To protect our platform, detect unauthorized access, and prevent fraudulent activity.
• Legal compliance: To comply with applicable laws, regulations, tax obligations, and legal proceedings.

4. Legal Bases for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary to deliver the services you've purchased, manage your account, process payments, and fulfill our contractual obligations.
• Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for marketing emails, meeting recordings, or optional cookies. You may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): Processing necessary for our legitimate business interests, such as improving our services, securing our platform, and conducting analytics — provided these interests do not override your fundamental rights.
• Legal obligation (Art. 6(1)(c) GDPR): Processing required to comply with legal and regulatory requirements, such as tax and accounting obligations under Dutch law.

5. Cookies & Tracking Technologies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device that help us provide and improve our services.

5.1 Types of Cookies We Use

5.2 Managing Cookies

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your cookie preferences at any time through our cookie settings panel or by adjusting your browser settings.

Most web browsers allow you to control cookies through their settings. Please note that disabling certain cookies may affect the functionality of our website.

5.3 Third-Party Cookies

Some cookies are placed by third-party services we use:

• Stripe: Payment processing and fraud detection
• Analytics provider: Website usage statistics (anonymized)

These third parties have their own privacy policies governing their use of cookies.

6. Data Sharing & Third Parties

We share your personal data only in the following circumstances:

• Service providers: Trusted third parties who help us operate our business, such as payment processors (Stripe), cloud hosting providers, email delivery services, and customer support tools. These providers are bound by data processing agreements (DPAs) and may only process your data on our instructions.
• AI model providers: When delivering AI agent services, we may transmit certain data to AI model providers (e.g. Anthropic, OpenAI, Google). We minimize the personal data shared and ensure appropriate safeguards are in place.
• Professional advisors: Our accountants, lawyers, and auditors, subject to professional confidentiality obligations.
• Legal requirements: When required by law, regulation, legal process, or enforceable governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

7. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). Where we transfer data outside the EEA (for example, to AI model providers based in the United States), we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• The EU-U.S. Data Privacy Framework, where applicable

You may request details of the specific safeguards applied to any international transfers by contacting us.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Account data: For the duration of your account plus 12 months after closure, to allow for account reactivation.
• Payment & invoice data: 7 years after the transaction date, as required by Dutch tax law (Algemene wet inzake rijksbelastingen).
• Communication records: 3 years after the last interaction, unless a longer retention period is required for legal purposes.
• Pipeline form delivery records: The form submission and delivery status are automatically scheduled for deletion from the website database after 90 days. Related email correspondence follows the communication-record period above.
• Usage & analytics data: Up to 26 months in aggregated and anonymized form.
• Cookie data: In accordance with the retention periods specified in Section 5.

When data is no longer needed, we securely delete or anonymize it.

9. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): You may request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Right to restrict processing (Art. 18): You may request that we limit the processing of your data in certain circumstances.
• Right to data portability (Art. 20): You may request your personal data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): You may object to processing based on legitimate interests, including profiling.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, contact us at privacy@openclawintelligence.com. We will respond within 30 days, as required by the GDPR.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls based on the principle of least privilege
• Secure password storage using industry-standard hashing algorithms
• Monitoring and logging of access to personal data
• Regular backups with encrypted storage

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is 100% secure. If you become aware of any security breach, please contact us immediately.

11. Children's Privacy

Our services are designed for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@openclawintelligence.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will notify you by email (if you have an account) and update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) or any other competent supervisory authority in the EU.