Privacy Policy for ClawRoute

Last updated: March 18, 2026

1. Introduction

Welcome to ClawRoute ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using ClawRoute at https://clawroute.app, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

ClawRoute
Website: https://clawroute.app
Contact: brandon@mg.clawroute.app

For users in the European Union, ClawRoute acts as the data controller for personal data collected through the Service.

3. Information We Collect

3.1 Personal Data

When you register and use ClawRoute, we may collect:

- Account information — name, email address, and password (hashed)
- Billing information — handled and stored by our third-party payment processor (e.g. Stripe); we do not store your full card details
- API keys — third-party AI provider keys you submit, encrypted at rest using AES-256-GCM; we never read or expose these in plaintext
- Usage data — request counts, cost breakdowns, model routing logs associated with your account

3.2 Non-Personal Data

We automatically collect non-personal data through cookies and similar technologies, including:

- Browser type and version
- Pages visited and time spent
- Referring URLs
- Device type and operating system
- Session identifiers

4. How We Use Your Data

We use the information we collect to:

- Create and manage your account
- Provide, operate, and improve the Service
- Route your AI API requests to the appropriate provider on your behalf
- Process payments and send billing-related emails
- Send you product updates, security notices, and changes to our Terms or this Policy
- Monitor and prevent abuse, fraud, or security incidents
- Comply with our legal obligations under Belgian and EU law

We do not sell your personal data to third parties.

5. Cookies
ClawRoute uses cookies to operate and improve the Service. Cookies are small text files stored on your device. We use:

- Essential cookies — required for login sessions and core functionality
- Analytics cookies — to understand how users interact with the Service (e.g. page views, feature usage)

You can control or disable cookies through your browser settings. Disabling essential cookies may prevent certain features from working correctly.

6. Data Sharing

We only share your data with third parties in the following circumstances:

- Payment processors (e.g. Stripe) — to handle subscription billing
- Infrastructure providers (e.g. hosting, database services) — to run the Service, under strict data processing agreements
- Legal obligations — if required by law, court order, or to protect the rights and safety of ClawRoute or others

All third-party processors we use are required to handle your data in compliance with applicable data protection laws.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account:

- Account data is deleted within 30 days
- Encrypted API keys are deleted immediately
- Anonymised usage data may be retained for analytical purposes

8. Your Rights (GDPR)

As ClawRoute is governed by Belgian law and operates within the EU, you have the following rights under the General Data Protection Regulation (GDPR):

- Right to access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — request that we limit how we process your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at brandon@mg.clawroute.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Autorité de protection des données (APD)

https://www.dataprotectionauthority.be

9. Data Security

We implement industry-standard security measures to protect your data, including:

- AES-256-GCM encryption for API keys at rest
- HTTPS/TLS encryption for all data in transit
- Access controls limiting who can view user data internally

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data with best practices.

10. Children's Privacy

ClawRoute is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify you by email and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us at:

ClawRoute

brandon@mg.clawroute.app

For all other inquiries, please visit our Contact Us page on the Website.

By using ClawRoute, you consent to the terms of this Privacy Policy.