Privacy Policy

CloudClaw Platform | Version 1.1 | Effective Date: March 1, 2026

Data Controller: Magic Life LLC, Florida, United States
Contact: contact@mycloudclaw.com
Data Protection Officer: dpo@mycloudclaw.com

1. Introduction

This Privacy Policy describes how CloudClaw, operated by Magic Life LLC (“we”, “us”, “our”), collects, uses, and protects your personal information. This policy complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

Account Information: Name, email address, company name, billing address, and payment information.

Usage Data: API call logs, agent interaction metrics, feature usage, and performance data.

Technical Data: IP addresses (hashed for geo-restriction audit), browser type, device information, and platform analytics.

Agent Data: Content processed by your deployed AI agents, stored in tenant-isolated databases.

Payment Data: Transaction records processed through Stripe and Coinbase Commerce.

3. Legal Basis for Processing (GDPR)

Processing Activity	Legal Basis
Account creation and management	Contract performance (Art. 6(1)(b))
Payment processing	Contract performance (Art. 6(1)(b))
Security and fraud prevention	Legitimate interest (Art. 6(1)(f))
Analytics (PostHog)	Consent (Art. 6(1)(a))
Marketing communications	Consent (Art. 6(1)(a))
Legal compliance	Legal obligation (Art. 6(1)(c))

4. How We Use Your Information

Service Delivery: To provide, maintain, and improve the CloudClaw platform
Billing: To process payments via Stripe and Coinbase Commerce
Analytics: To generate aggregated usage statistics (via PostHog, with consent)
Security: To detect and prevent fraud, abuse, and policy violations
Communication: To send service updates, security alerts, and product announcements

5. Cookies and Tracking

We use essential cookies, analytics (PostHog), and remarketing technologies (GA4, Meta Pixel when enabled). Non-essential cookies require your consent. See our Cookie & Tracking Policy for full details.

6. Data Storage and Isolation

Customer data is stored in tenant-isolated databases
Encrypted API keys (BYOK) use AES-256-GCM encryption at rest
Static assets are stored in object storage
Cache data is stored in edge key-value stores with configurable TTLs

7. International Data Transfers

CloudClaw operates on a global edge network. For EU→US transfers, we rely on Standard Contractual Clauses (SCCs) and encryption in transit (TLS 1.3) and at rest.

8. Data Sharing and Sub-Processors

We do not sell personal data. We share data only with:

Sub-Processor	Purpose	Location
Edge infrastructure provider	Infrastructure	Global
Stripe	Payment processing	US
PostHog	Analytics (with consent)	US / EU
Resend	Email	US
Coinbase Commerce	Crypto payments	US
AI Providers (BYOK)	Your keys, your provider’s terms	Varies

9. Data Retention

Active account data: Duration of subscription
Post-termination: 30 days, then permanently deleted
Usage logs: 90 days
Legal acceptances: Indefinitely for compliance

10. Your Rights (GDPR)

EEA/UK residents: Right of access (Art. 15), rectification (Art. 16), erasure (Art. 17, processed within 30 days), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), and withdrawal of consent. Contact dpo@mycloudclaw.com. You may lodge a complaint with your local data protection authority.

11. Your Rights (CCPA)

California residents: Right to know, delete, and opt-out. We do not sell personal information. Contact privacy@mycloudclaw.com.

12. Security

All data encrypted in transit (TLS 1.3) and at rest
Zero Trust access control for internal authentication
BYOK keys encrypted with AES-256-GCM
Tenant data isolation via separate databases

13. Contact

Privacy inquiries: privacy@mycloudclaw.com
DPO: dpo@mycloudclaw.com

CloudClaw is a product of Magic Life LLC.