Privacy Policy

Menlo Park Labs Corp. ("Clawable," "we," "us," or "our") is a Canadian federal corporation. We are committed to protecting your privacy and handling your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and, where applicable, the General Data Protection Regulation (GDPR).

This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website at clawable.ai ("Site") or engage our services.

2.1 Information You Provide

When you submit our contact form, we collect:

• Name (required)
• Email address (required)
• Company name (optional)
• Message (optional)

2.2 Information Collected Automatically

We use Vercel Analytics, a privacy-focused web analytics service provided by Vercel Inc., to collect aggregated, anonymized usage data about how visitors interact with our Site. This may include:

• Page views and navigation paths
• Referring URLs
• Browser type and device category
• Geographic region (country/city level, not precise location)

Vercel Analytics does not use cookies and does not collect personally identifiable information. For more information, see Vercel's privacy policy.

2.3 Information We Do Not Collect

We do not collect payment information through our Site. We do not require user accounts or passwords. We do not use tracking cookies or third-party advertising pixels.

We use the information we collect for the following purposes:

• To respond to inquiries: We use contact form data to respond to your request and provide a custom quote
• To communicate about services: If you engage our services, we use your contact information for service-related communications
• To improve our Site: We use anonymized analytics data to understand Site usage and improve performance
• To comply with legal obligations: We may process data as required by applicable law

We do not use your personal information for automated decision-making or profiling. We do not sell, rent, or trade your personal information.

During the deployment process, clients may provide API keys, access tokens, or other credentials to enable integration configuration. With respect to these credentials:

• We use credentials solely for the purpose of configuring integrations as agreed upon in the statement of work
• We do not access, view, or process the underlying data accessible through such credentials (e.g., emails, messages, documents, CRM records)
• We do not retain or store credentials beyond the active deployment period
• Clients are responsible for revoking or rotating credentials after the deployment period

OpenClaw agents are deployed on Client-owned or Client-controlled infrastructure. Any data processed by these agents (emails, messages, documents, CRM data, etc.) remains on Client infrastructure at all times. Clawable does not host, store, access, or process this data.

Clients are solely responsible for the privacy and security of data processed by AI agents on their own infrastructure, including compliance with all applicable privacy laws and regulations.

We use the following third-party service providers in connection with our Site:

• Supabase — Database hosting for contact form submissions. Supabase stores your contact form data on our behalf. See Supabase's privacy policy for details.
• Vercel — Website hosting and analytics. See Vercel's privacy policy for details.
• Cal.com — Appointment scheduling. When you click a booking link on our Site, you are redirected to Cal.com, which is governed by its own privacy policy. We do not control and are not responsible for Cal.com's data practices.

We do not share your personal information with any other third parties except as required by law or as necessary to provide our Services.

We retain contact form data for as long as necessary to respond to your inquiry and for a reasonable period thereafter for business records purposes, unless a longer retention period is required by law.

You may request deletion of your contact information at any time by contacting us (see Section 12).

We implement reasonable technical and organizational measures to protect the personal information we collect. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information.

Our service providers (Supabase, Vercel) may process data in jurisdictions outside of Canada, including the United States. By submitting information through our Site, you consent to such transfers. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

Under PIPEDA and BC PIPA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Request deletion of your personal information, subject to legal and contractual obligations
• Withdraw consent to the collection, use, or disclosure of your personal information (which may affect our ability to provide Services)
• File a complaint with the Office of the Privacy Commissioner of Canada or the BC Information and Privacy Commissioner if you believe your privacy rights have been violated

If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR, including:

• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format
• Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances
• Right to object: Object to processing of your personal data based on legitimate interests
• Right to lodge a complaint: File a complaint with your local data protection supervisory authority

Our legal basis for processing personal data of EU residents is: (a) your consent when submitting the contact form; and (b) our legitimate interest in responding to inquiries and improving our services.

Our Site and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time by posting the revised version on our Site with an updated "Last updated" date. For material changes, we will make reasonable efforts to notify you (e.g., by posting a notice on the Site or sending an email to active clients). Your continued use of the Site after any changes constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a privacy-related complaint, contact us:

• Through the contact form on our Site
• By email at hello@clawable.ai

We will respond to privacy-related requests within 30 days, as required by PIPEDA.