Privacy Policy

1. Introduction

TurboClaw ("we", "us", "our") respects your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. We use this to create and manage your account.

Payment Information

Payments are processed by Stripe. We store your Stripe customer ID and subscription status. We do not store your credit card number, CVV, or full billing details — Stripe handles this securely.

Telegram Bot Token

When you connect a Telegram bot, we store your bot token to operate the bot on your behalf. This token allows us to send and receive messages through your bot.

Bot Usage Data

We track AI credit usage (amount consumed, model used) for billing and account management. We do not store the content of conversations between your Telegram bot and its users.

Analytics

We use Datafa.st for privacy-friendly website analytics. This collects anonymized data such as page views, referrers, and browser type. No personal data is shared with this service.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Manage your account and subscription
• Deploy and operate your Telegram bot instances
• Track AI credit usage and enforce usage limits
• Communicate with you about your account, billing, or support requests
• Detect and prevent abuse or fraud

4. Information Sharing

We do not sell your personal information. We share data only with the following third-party services necessary to operate TurboClaw:

• Stripe — payment processing (email, subscription data)
• Google — authentication (OAuth tokens)
• Anthropic — AI model API calls (message content is sent to generate responses)
• Telegram — bot messaging (messages are relayed through Telegram's API)
• Heroku — application hosting
• Hetzner — bot server infrastructure

Each of these services has its own privacy policy governing how they handle your data.

5. Cookies

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising or tracking cookies.

6. Data Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS/SSL), secure credential storage, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it.

8. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data
• Portability — request your data in a portable format
• Objection — object to certain processing of your data

To exercise any of these rights, contact us at [email protected].

9. Children's Privacy

TurboClaw is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this Privacy Policy, contact us at [email protected].