Skip to main content

Privacy Policy

Last updated: March 30, 2026

1. Who We Are

LuluClaw is operated by hecz.dev. This policy describes how we collect, use, and protect information when you use luluclaw.com and any associated subdomains or services.

2. Information We Collect

Account information:

When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk). We do not store passwords directly.

Payment information:

Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers. We retain your Stripe customer ID and subscription status to manage your plan.

Usage data:

We collect information about how you interact with the Service, including page views, feature usage, and API call volumes. This data is used to improve the Service and is processed through Vercel Analytics.

AI assistant data:

Conversations between your deployed AI assistants and their end users are processed within your NemoClaw sandbox environment. We do not access, read, or analyze the content of these conversations unless required to investigate a specific abuse report or legal obligation.

API keys:

If you use the BYOK (Bring Your Own Key) plan, your API keys are encrypted at rest and stored only to route requests to your chosen LLM provider. We never log, share, or access your API keys for any purpose other than operating your assistant.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process payments and manage your subscription
  • Send account-related notifications (billing, security, service updates)
  • Monitor for abuse and enforce our Acceptable Use policy
  • Respond to support requests

We do not sell your personal information. We do not use your data to train AI models. We do not share your information with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services:

  • Clerk — authentication and user management
  • Stripe — payment processing
  • Vercel — hosting and analytics
  • Sentry — error monitoring (no personal data is included in error reports)

Each of these services has its own privacy policy. We encourage you to review them.

5. Data Storage and Security

Your account data is stored on infrastructure hosted by OVH (primary) and Hetzner (disaster recovery standby). All data is encrypted in transit via TLS. Sensitive data such as API keys is encrypted at rest. Database backups are performed nightly and retained for 14 days.

AI assistant workloads run in isolated NemoClaw sandboxes with kernel-level security (Landlock filesystem isolation, seccomp syscall filtering, and policy-enforced network egress). Each sandbox is isolated from other tenants.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal, billing, or audit purposes. Anonymized usage statistics may be retained indefinitely.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data using the tools provided in your dashboard
  • Withdraw consent for optional data processing at any time

To exercise these rights, contact us at support@luluclaw.com.

8. Cookies

We use essential cookies required for authentication and session management. We use Vercel Analytics for anonymous, aggregate usage statistics. We do not use advertising cookies or tracking pixels. We do not sell data to advertisers.

9. Children

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Changes take effect when posted on this page. We will notify active users of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at support@luluclaw.com.