Privacy Policy

This policy explains how Clawsers LLC collects, uses, shares, and protects information when you use our AI sales agent service. Written in plain language; the legal terms only show up where they have to.

1.Introduction

Clawsers LLC ("Clawsers," "we," "us," "our") operates the Clawsers AI sales agent service (the "Service"). Clawsers LLC is a Wyoming limited liability company with its registered address at 30 N Gould St Ste R, Sheridan, WY 82801, United States.

The Service is currently in closed beta and available only to clients located in the United States. No fees are charged during this period.

If you have questions about this policy, contact us at privacy@clawsers.com.

2.Who this policy covers

This policy applies to three groups:

• Operators — Clawsers clients: businesses, creators, and sellers who use the Service to manage their Instagram presence.
• End-users — individuals who interact with operators on Instagram (e.g., people who send a direct message or comment on a post). End-users do not have a Clawsers account; we process this data on the operator's behalf.
• Visitors — anyone who visits clawsers.com or app.clawsers.com without signing in.

3.Information we collect

3.1 From operators

When you sign up and connect your Instagram account, we collect:

• Account credentials — email and a hashed password
• Instagram account identifiers — username, account ID, page metadata
• Direct messages and comments handled by the Service on your behalf
• Configuration settings, playbooks, and conversation logs you create
• Activity logs — login events, dashboard actions, IP address, user-agent

3.2 From end-users

When end-users interact with operators through the Service, we receive (via Meta's official APIs):

• Instagram user IDs of message and comment senders
• Content of direct messages, comments under posts and reels, and replies
• Timestamps and metadata associated with these interactions

We process this data on behalf of the operator the end-user is interacting with. The operator is the data controller; Clawsers is the data processor.

3.3 From visitors

For anyone visiting our public web pages we record server access logs (IP, user-agent, requested URL, timestamp) for security and abuse prevention. We do not currently use third-party analytics, advertising trackers, or marketing cookies.

4.How we use it

• Operate the Service: send replies, qualify leads, maintain conversation logs, route messages to the operator's sales team
• Train AI agents on the operator's own communication patterns to match their voice. Data is segregated per operator and never used to train agents for other operators.
• Account management, customer support, and (when applicable in the future) billing
• Security, fraud prevention, abuse detection
• Compliance with applicable U.S. law and Meta Platform Terms

5.Permissions we request from Meta

When an operator connects an Instagram account, the Service requests the following permissions from Meta:

• instagram_business_basic — read the operator's Instagram username and basic profile metadata
• instagram_business_manage_messages — read and reply to direct messages on the operator's behalf
• instagram_business_manage_comments — read and reply to comments under the operator's posts and reels
• Supporting permissions necessary to operate the above (e.g., page metadata access required by Meta's API)

We use these permissions strictly for the purposes described in this policy and in accordance with Meta Platform Terms. We do not use Instagram data for advertising, profiling, or any purpose unrelated to the Service.

6.Sub-processors

We use the following service providers to operate the Service. We do not sell data, and we do not share it with any other third parties for their own marketing or analytics purposes.

LLM providers process operator content (DMs, comments) for the limited purpose of generating responses. We have configured these providers so that operator content is not used to train their models, where such configuration is supported by the provider's API.

7.International data transfers

Although Clawsers is a U.S. company, our infrastructure provider Hetzner is located in Germany. Operator and end-user data is therefore transferred between the United States and Germany. We rely on Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework, where applicable, to safeguard these transfers.

8.Data retention

We retain personal information only as long as needed for the purposes described above:

• Operator account data — while your account is active
• Direct message and comment logs — for the duration of the Service agreement, plus 30 days after termination
• Backups — up to 90 days after the underlying data is deleted
• Server logs — 90 days
• Legal and compliance records — as required by applicable law

After a retention period expires, data is permanently deleted from production systems and removed from backups during the next backup-rotation cycle.

9.Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing
• Receive a copy of your personal information in a portable format

9.1 California (CCPA/CPRA) rights

If you are a California resident you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of any sale or sharing of personal information — note: we do not sell or share personal information for advertising
• Limit use and disclosure of sensitive personal information
• Be free from discrimination for exercising these rights

To exercise these rights email privacy@clawsers.com. We respond within 45 days of receipt.

9.2 How to submit a request

• Operators — email privacy@clawsers.com from the address registered with your account, or use the data deletion controls in your dashboard when available.
• End-users — see our Data Deletion Instructions page or email privacy@clawsers.com.

We may need to verify your identity before fulfilling certain requests.

10.Children's privacy

The Service is intended exclusively for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has interacted with the Service, contact us at privacy@clawsers.com so we can remove the relevant data.

11.Security

We implement reasonable technical and organizational measures to protect personal information, including:

• TLS encryption in transit
• Access controls and authentication for all administrative actions
• Network isolation and firewall rules at the infrastructure level
• Regular review of dependencies and configurations

No system is perfectly secure. If we become aware of a security incident affecting your data we will notify you in accordance with applicable law.

12.Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top reflects the most recent version. We will notify operators of material changes by email or through the dashboard. Continued use of the Service after changes take effect means you accept the updated policy. We retain prior versions and provide them on request.

13.Contact

• Email — privacy@clawsers.com
• Postal mail — Clawsers LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States