TL;DR
- ✓We store only what is needed to run your agent and manage your account
- ✓Your conversations are stored for chat history. Deletable anytime.
- ✓We do NOT train AI models on your data
- ✓We do NOT sell your data to third parties
- ✓Invite-enabled accounts get isolated sandboxes. Base access uses shared infrastructure.
Storage
What we store
Account data
Email addressLogin and account recovery
Infrastructure profileDetermine your enabled capabilities
Agent configuration
SOUL.md, IDENTITY.mdDefine how your agent behaves
Sandbox ID and statusManage your environment
Channel connectionsKnow which platforms are connected
Conversations
Last 100 messages per channelMaintain conversation continuity
Message timestampsOrder conversations correctly
Not stored
What we do not store
- ◆Credit card numbers: Stripe handles all payment data. We never see card details.
- ◆Plaintext API keys: Channel credentials are AES-256-GCM encrypted. Agent keys stored as HMAC hashes.
- ◆Training data: We do NOT use your conversations to train AI models.
Infrastructure
Access isolation
Base access
- ◌Shared server infrastructure
- ◌Data isolated in database via security rules
- ◌No filesystem or tool access
- ◌Rate limited to prevent abuse
Invite-enabled
- ✓Dedicated isolated container. Yours only.
- ✓Your agent runs in its own environment
- ✓No shared processes or memory
- ✓Full filesystem isolation
Third parties
Services we use
- ◆Authentication: Secure login and account management
- ◆Container hosting: Isolated sandbox environments (invite-enabled accounts)
- ◆CDN / hosting: Website and API delivery
- ◆AI providers: Process messages to generate responses
Each service operates under its own privacy policy. Conversations are sent to AI providers only to generate responses.
Your rights
What you can do
- ✓Access: View all your data in the dashboard
- ✓Delete: Clear history anytime. Delete account to remove everything.
- ✓Export: Config files always visible and downloadable
- ✓Portable: SOUL.md and IDENTITY.md are standard markdown. Transfer to any OpenClaw instance.