Privacy Policy

1. Introduction

Claw0x ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using Claw0x, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Account Information

• Email address
• Wallet address (Base blockchain)
• Username and profile information
• Authentication credentials (managed by Privy)

2.2 Usage Data

• API calls made (timestamp, skill used, response time, status code)
• Billing and transaction history
• Skills published (for Sellers)
• Platform interactions and feature usage

2.3 Technical Data

• IP address
• Browser type and version
• Device information
• Operating system
• Referral source

2.4 Payment Information

Payment processing is handled by third-party providers (MoonPay for fiat, Base blockchain for crypto). We do not store credit card numbers or sensitive payment credentials.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Platform
• Process transactions and manage billing
• Authenticate users and secure accounts
• Monitor API usage and enforce rate limits
• Detect and prevent fraud, abuse, and security threats
• Provide customer support
• Send service-related notifications (billing alerts, security notices, platform updates)
• Generate anonymized analytics to improve Skill quality and Platform performance
• Comply with legal obligations

4. API Call Data

4.1 Request/Response Logging: We log API call metadata (timestamp, skill ID, response time, status code) for billing and analytics. We do not log the full request body or response body of API calls.

4.2 Skill Providers: Sellers receive anonymized usage statistics (call counts, average response times, error rates). They do not receive Buyer identity or request content.

4.3 Data Transit: API call data passes through our gateway in transit but is not stored. All data in transit is encrypted using TLS 1.3.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate (Privy for authentication, Supabase for data storage, Vercel for hosting, MoonPay for payments)
• Blockchain Networks: Transaction data is recorded on the Base blockchain and is publicly visible by nature of blockchain technology
• Legal Requirements: When required by law, court order, or government request
• Safety: To protect the rights, safety, or property of Claw0x, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Blockchain and Wallet Data

Claw0x uses the Base blockchain (Ethereum L2) for payment processing. Please be aware:

• Blockchain transactions are permanent and publicly visible
• Your wallet address and transaction history are recorded on-chain
• We cannot delete or modify blockchain data
• Embedded wallets are managed through Privy with industry-standard security

7. Data Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• API keys are hashed and stored securely (only prefixes are displayed)
• Seller endpoint credentials are encrypted before storage
• Daily spending limits to prevent unauthorized usage
• Regular security audits and vulnerability assessments

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

8.1 Account Data: Retained for the duration of your account and up to 30 days after deletion.

8.2 Transaction Records: Retained for 7 years to comply with financial regulations.

8.3 Usage Logs: API call metadata is retained for 90 days for analytics, then anonymized.

8.4 Blockchain Data: On-chain transaction data is permanent and cannot be deleted.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at privacy@claw0x.com. We will respond within 30 days.

10. Cookies and Tracking

We use minimal cookies and tracking:

• Essential Cookies: Required for authentication and session management
• Analytics: Vercel Analytics for anonymized usage statistics

We do not use third-party advertising cookies or cross-site tracking. You can disable cookies in your browser settings, but some Platform features may not function properly.

11. International Data Transfers

Our services are hosted in the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the US. By using the Platform, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

12. Children's Privacy

Claw0x is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or Platform announcement at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

14. Contact Us

For privacy-related questions or to exercise your data rights:

• Email: privacy@claw0x.com
• General Support: support@claw0x.com