Privacy Policy

Effective: March 16, 2026 · Last updated: September 14, 2026

1. Who We Are

ClawMetry Cloud is operated by Instalabs LLC, registered at 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States.

When we say "ClawMetry," "we," "us," or "our," we mean Instalabs LLC.

2. End-to-End Encryption: Your Data Is Yours

ClawMetry Cloud uses client-side end-to-end encryption (E2E). Here is exactly what that means:

• A secret encryption key is created on your machine during setup. Our servers do not store it.
• Your agents' content (sessions, transcripts, memory files, logs, cron states, system snapshots) is encrypted locally before being transmitted to our cloud.
• The encrypted content is stored in Google Cloud SQL (PostgreSQL). For that content we store only ciphertext.
• When you view your dashboard at app.clawmetry.com, the content is decrypted in your browser using your secret key. Your browser receives the key from your machine in a link fragment, which browsers do not send to servers, and keeps it in browser storage. A paired ClawMetry desk device receives the key sealed to that device, or you enter it on the device over your own network.
• If you rotate a node's key from the web dashboard, the new key passes through our servers to reach that node. To avoid that, rotate on the machine itself with clawmetry connect --enc-key.
• We cannot decrypt, read, inspect, or use your agents' encrypted content. Not our engineers, not our support team, not anyone.
• Operational metadata is sent over TLS in readable form so the dashboard, alerts and device work without your key: your machine's hostname and node ID, per-session runtime, model, status, timestamps, token counts and cost, the names of tools used and how often, short detector messages (for example "Bash failed 5 times"), cron job names and schedules, alert rule names and summaries, and plan details. The complete list is our network egress inventory.
• Telemetry you push with an ingest key (for example OpenTelemetry traces from CI or a hosted application) is not end-to-end encrypted: the sender holds no encryption key, so we store and can read what it sends.

What happens if you lose your secret key?

Your data becomes permanently inaccessible. We cannot recover it for you because we do not keep a copy of the key. Keep your secret key safe.

3. What We Do Store (Unencrypted)

To operate the service, we store the following in plain text:

• Email address you use to sign in
• Demo requests: the first and last name, work email, country, US state when applicable, and employee range you submit, together with the referring page and campaign information. We use these details to arrange your demo and respond to your request. Choosing a meeting time opens Calendly.
• Research report requests: the first name, last name, email and company name you submit, together with the page where you requested the report. We use these details to deliver the report, record your request and respond to your interest. A report request does not subscribe you to a newsletter.
• Account metadata: plan type, trial start/end dates, subscription status
• Node identifiers: node IDs, custom display names you set, online/offline status, last-seen timestamps
• Your account API key: stored together with a SHA-256 hash of it, so we can authenticate your nodes and give the key back to you when you sign in on a new browser. The account API key identifies your account; it cannot decrypt your agents' content, which uses the separate encryption key described above.
• Operational metadata listed in section 2, and telemetry you push with an ingest key
• Billing data: managed entirely by Stripe (see Section 6)

We do not store: passwords (we use OTP-based authentication), your secret encryption key, or your agents' conversations and activity content in readable form (except telemetry you choose to push with an ingest key).

What the software sends when cloud sync is off

The open-source software keeps session data on your machine. With cloud sync off it still makes these requests: an install ping to app.clawmetry.com once per install and once per version update (a random install ID, the ClawMetry version, operating system, Python version, the detected agent and whether it runs in CI); a failure report if the background service cannot do its job; and a version check against PyPI, which installs a newer release unless you set CLAWMETRY_AUTO_UPDATE=0. Set DO_NOT_TRACK=1 (or CLAWMETRY_NO_TELEMETRY=1) to stop the install ping and failure report, or CLAWMETRY_OFFLINE=1 to stop every one of these requests. Turning cloud sync off is not the same as offline mode.

4. How We Use Your Information

We use the unencrypted data listed above solely to:

• Authenticate you and manage your account
• Route encrypted data to the correct account
• Process payments and manage subscriptions
• Send transactional emails (OTP codes, billing receipts)
• Respond to demo requests and arrange meetings you ask for
• Monitor service health and uptime

We do not sell, share, rent, or trade your personal information with third parties for marketing purposes. Ever.

5. Two-Factor Authentication

ClawMetry Cloud uses OTP-based two-factor authentication for all account access. When you sign in, a one-time code is sent to your email. There are no passwords to steal or leak.

6. Payment Processing

All payments are processed by Stripe, Inc. We do not store credit card numbers, bank account details, or other payment credentials on our servers. Stripe's privacy policy applies to payment data: stripe.com/privacy.

7. Infrastructure and Security

• Hosting: Google Cloud Platform (Cloud Run, europe-west1 region)
• Database: Google Cloud SQL (PostgreSQL) with encryption at rest
• Uptime target: 99.5% availability
• Data location: EU (europe-west1, Belgium)
• All connections use TLS 1.2+ encryption in transit
• Database connections are restricted to authenticated Cloud Run services only

Every third-party service that can receive data, with its purpose and when it applies, is listed on our sub-processors page.

8. Data Retention

• Active accounts: Encrypted agent data is retained as long as your account is active and your nodes are syncing.
• Inactive nodes: Data from nodes that have not sent a heartbeat in 24 hours may be automatically purged.
• Account deletion: When you delete your account or disconnect a node, all associated encrypted data is permanently deleted from our servers.
• Cancellation: You can cancel your subscription at any time. After cancellation, your data is retained for 30 days in case you resubscribe, then permanently deleted.

9. Open Source Transparency

The ClawMetry sync daemon and dashboard are open source (GitHub). You can inspect exactly what data is collected, how it is encrypted, and what is transmitted. The encryption implementation is fully auditable.

10. Your Rights

You have the right to:

• Access your personal data (email, account info)
• Delete your account and all associated data
• Export your data (the open-source sync daemon stores everything locally)
• Cancel your subscription at any time with no penalties
• Disconnect any node at any time, which stops data syncing immediately
• Withdraw your consent to analytics, session replay, advertising or live chat at any time, as easily as you gave it, from the "Cookie preferences" link at the bottom of every page

To exercise any of these rights, email us at hello@clawmetry.com.

11. Cookies and Tracking

Nothing non-essential runs until you allow it. Analytics, session replay, advertising and live chat are off by default, in every country, and stay off until you turn them on in the cookie banner. Our full Cookie Policy lists every cookie by name, purpose, lifetime and recipient. In summary:

• Strictly necessary (always on): your sign-in token, your language choice, your cookie choice itself, sign-in security tokens, interface preferences, and the end-to-end encryption keys that keep your agent data readable only by you. The encryption keys are kept in your browser, not on our servers.
• Product analytics (off by default): Google Analytics, plus our own visit counter, which uses a random ID paired with a country lookup and a one-way hash of your IP address. We do not store the IP address itself.
• Session replay (off by default): Microsoft Clarity, which records page interaction so we can find what is broken.
• Advertising and attribution (off by default): Google Ads conversion tracking and campaign referral codes.
• Live chat (off by default): the Crisp chat widget, loaded only if you want to message us.
• AI product expert (off by default): the Vapi voice and chat widget on the homepage, loaded only after you choose to start a conversation. Your messages, and your microphone audio if you speak, are processed by Vapi, Inc. (USA) and its AI providers to answer you. We do not use these conversations for advertising.

No agent data is ever shared with any of these services. We run no advertising pixels from social networks and do not track you across other websites.

You can change or withdraw your choice at any time from the Cookie preferences link at the bottom of every page. Withdrawing takes one click, exactly like granting. If your browser sends a Global Privacy Control signal, we treat it as a refusal automatically.

12. Children's Privacy

ClawMetry is a developer tool and is not directed at children under 13. We do not knowingly collect information from children.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the dashboard. The "last updated" date at the top reflects the most recent revision.

14. Contact

For privacy questions or concerns:

• Email: hello@clawmetry.com
• Entity: Instalabs LLC
• Address: 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States

← Back to ClawMetry