Privacy Policy

Last updated: March 1, 2026  |  Operator: Ownify SE

1. Data Controller

Ownify SE (hereinafter referred to as the "Controller") is the operator of the OpenClaw Implementation service and the controller of personal data processed in connection with the provision of this service in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.

2. What Personal Data We Process

2.1 Data Provided via the Contact Form

• First and last name
• Email address
• Phone number
• Company name (optional)
• Message content

2.2 Data Processed within the OpenClaw Service

• User identifier on the Telegram and/or WhatsApp platform
• Content of conversations with the AI agent (text messages, commands)
• Documents and files shared with the agent
• User settings and preferences
• Interaction history and conversation context (persistent agent memory)

2.3 Technical Data

• IP address when visiting the website
• Browser type and operating system
• Duration and frequency of website visits
• Device information

3. Purposes and Legal Basis for Processing

Purpose of Processing	Legal Basis	Retention Period
Responding to inquiries from the contact form	Legitimate interest (Art. 6(1)(f) GDPR)	6 months from last contact
Provision of the OpenClaw service (AI agent operation)	Performance of a contract (Art. 6(1)(b) GDPR)	Duration of the contractual relationship + 3 years
Invoicing and accounting	Compliance with a legal obligation (Art. 6(1)(c) GDPR)	10 years pursuant to the Accounting Act
Service improvement and usage analysis	Legitimate interest (Art. 6(1)(f) GDPR)	2 years
Technical security of the website	Legitimate interest (Art. 6(1)(f) GDPR)	90 days

4. Data Processing by the AI Agent

The OpenClaw AI agent uses Claude technology by Anthropic for natural language processing. In this regard, please note the following:

• Mac Mini Option: All data is processed locally on the customer's device. Conversations and documents do not leave the customer's physical environment, with the exception of API calls to the Claude service, which are encrypted, and Anthropic does not use them for model training according to its terms of service.
• Cloud (VPS) Option: Data is stored on a secure virtual server. Data transfer is carried out exclusively via encrypted SSH and HTTPS protocols. The server is protected by a firewall, and access is authenticated using SSH keys (ED25519).

5. Recipients of Personal Data

Your personal data may be disclosed to the following categories of recipients:

• Anthropic PBC — provider of the Claude AI model (processor, headquartered in the USA, adequate safeguards under Art. 46 GDPR)
• Hosting provider — in the case of the cloud option, servers within the EU
• Telegram / WhatsApp (Meta) — communication platforms used for message delivery
• Accountants and tax advisors — for compliance with statutory obligations

We do not sell, rent, or otherwise provide personal data to third parties for marketing purposes.

6. Transfer of Data Outside the EU

In connection with the use of the Claude service by Anthropic, data may be processed on servers in the USA. Anthropic commits to ensuring adequate safeguards for the protection of personal data in accordance with relevant decisions of the European Commission and Standard Contractual Clauses (SCC).

7. Data Security

We use the following technical and organizational measures to protect your personal data:

• Encryption of data in transit (TLS/SSL, SSH with AES-256)
• Authentication using SSH keys (ED25519)
• Regular security updates of the system
• Restricted access to data only for authorized personnel
• Firewall and access monitoring
• Regular data backups

8. Your Rights

In connection with the processing of your personal data, you have the following rights:

• Right of access — you have the right to obtain confirmation of processing and a copy of your data
• Right to rectification — you may request the correction of inaccurate or the completion of incomplete data
• Right to erasure — you may request the deletion of your data if it is no longer necessary for the original purpose
• Right to restriction of processing — you may request a temporary restriction of processing
• Right to data portability — you have the right to receive your data in a structured format
• Right to object — to processing based on legitimate interest
• Right to withdraw consent — if processing is based on consent, you may withdraw it at any time

To exercise your rights, please contact us at info@openclawbot.cz. We will respond to your request within 30 days at the latest.

9. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable law, you have the right to lodge a complaint with the supervisory authority:

10. Cookies

The openclawbot.cz website currently does not use tracking cookies or third-party analytics tools. We only use technically necessary cookies for the proper functioning of the website.

In the event that analytics tools are deployed in the future, you will be informed and given the option to grant or refuse consent through a cookie banner.

11. Changes to This Policy

This privacy policy may be updated from time to time. We will inform you of significant changes through the website. We recommend reviewing this policy regularly.

This policy becomes effective on March 1, 2026.