Privacy Policy

Last updated: January 31, 2026

This Privacy Policy describes how MyOpenClaw ("we", "us", or "our") collects, uses, and protects your information when you use our OpenClaw deployment service ("Service").

1. Information We Collect

1.1 Account Information

When you use our Telegram bot, we collect:

• Telegram user ID and username
• First name and last name (as provided by Telegram)
• Language preference

1.2 Payment Information

When you make a payment, we collect:

• Transaction IDs from Telegram Stars or Crypto Pay
• Payment amount and currency
• Subscription period selected

We do not store credit card numbers, cryptocurrency wallet addresses, or other sensitive payment credentials. All payment processing is handled by Telegram or Crypto Pay.

1.3 Instance Data

For your deployed OpenClaw instance, we store:

• Instance configuration (size, region)
• Subdomain assigned to your instance
• Server IP address
• Instance status and creation date

1.4 Usage Data

We collect basic usage information:

• Commands you send to our bot
• Instance management actions (start, stop, restart)
• Error logs for troubleshooting

2. How We Use Your Information

We use the collected information to:

• Provision and manage your OpenClaw instance
• Process payments and manage subscriptions
• Provide customer support
• Send service-related notifications
• Track referral commissions (if applicable)
• Improve and maintain the Service

3. Data Isolation

We do not have access to:

• Conversations you have with your OpenClaw instance
• Files or documents you upload to your instance
• API keys you configure within your instance
• Custom prompts or configurations you set

4. Data Sharing

We share your information only with:

• DigitalOcean: Our infrastructure provider, to provision and manage servers
• Payment Processors: Telegram Stars and Crypto Pay for payment processing
• Domain Provider: For DNS management of your subdomain

We do not sell, rent, or trade your personal information to third parties.

5. Data Retention

We retain your data as follows:

• Account data: Until you request deletion or 2 years of inactivity
• Payment records: 7 years for legal and tax compliance
• Instance data: Until instance termination, then deleted within 30 days
• Logs: 90 days for troubleshooting purposes

6. Data Security

We implement appropriate security measures:

• All connections are encrypted with TLS/HTTPS
• API keys and credentials are encrypted at rest
• Each instance has dedicated SSH keys
• Database access is restricted and logged

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data and instance
• Portability: Export your instance configuration

To exercise these rights, contact us through our Telegram bot.

8. Instance Termination

When your subscription expires or you terminate your instance:

• Your server is immediately shut down
• All data on the server is permanently deleted within 24 hours
• Your subdomain is released
• We retain only payment records and basic account information

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through our Telegram bot. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

• General support: Telegram bot or [email protected]
• Legal inquiries: [email protected]
• Privacy concerns: [email protected]