Privacy Policy
Effective Date: February 23, 2026
Last Updated: February 23, 2026
This Privacy Policy describes how Goodwill Labs Inc. ("we," "us," or "our") collects, uses, and protects your information when you use our website (clawdi.ai) and its related services (collectively, the "Service"). Our commitment to your privacy is a cornerstone of our product, which is designed to be "Private by Design." By using our Service, you agree to the collection and use of information in accordance with this policy. This Privacy Policy is incorporated into our Terms of Use.
1. Scope
Clawdi.ai is architected to protect your privacy fundamentally. The core of our Service is the deployment of an OpenClaw instance within a Confidential Virtual Machine (CVM) running in a Trusted Execution Environment (TEE) on Phala Cloud, secured by Intel TDX technology. This means:
- Your conversations and API keys are end-to-end encrypted and processed within the TEE.
- We, Goodwill Labs Inc., cannot access or view your sensitive data, such as your chat history or your third-party API keys. Your API keys are encrypted on your device (client-side) using X25519 + AES-256-GCM before being transmitted to the TEE, and can only be decrypted inside the secure enclave for use by your AI assistant.
2. Information We Collect
We collect information necessary to provide and improve our Service, while minimizing our access to your personal data.
A. Information You Provide to Us
| Data Type | Description | How We Use It |
|---|---|---|
| Account Information | When you register, we collect your email address and name. Our authentication is managed by Clerk, which may also use information from your Google account if you sign up via Google. | To create and manage your account, provide customer support, and communicate with you. |
| Payment Information | When you subscribe to a paid plan, our payment processor, Stripe, collects your payment card information. | To process payments, manage subscriptions, and prevent fraud. We do not store your full payment card details. |
| Configuration Data | You provide a name for your AI assistant, choose its personality, and select a preferred language. You also provide your Telegram username to connect the service. | To personalize and configure your AI assistant according to your preferences. |
| API Keys & Integrations | You provide API keys for third-party services (like Google Workspace, GitHub, Notion) to grant your AI assistant specific skills. These keys are encrypted client-side and sent directly to the TEE. | We never see them. They are used solely by your AI assistant to perform tasks on your behalf. |
B. Information We Do Not Access
- Conversations: Your chat history with your AI assistant is processed and stored within the TEE. We do not have the technical ability to access this content.
- Third-Party Data: Data accessed by your AI assistant from your integrated accounts (e.g., your emails, documents, code) is processed within the TEE and is not visible to us.
C. Information Collected Automatically
- Usage Data: We may collect metadata about your use of the Service, such as deployment status (running, stopped), resource consumption (vCPU, RAM, Disk), and AI credit usage. This data is essential for billing and for monitoring the health of our platform.
- Cookies: We and our service providers (like Clerk and Stripe) use cookies and similar technologies for purposes such as authentication, session management, and security.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide and Maintain the Service: To deploy and manage your OpenClaw instance, process your requests, and ensure the platform's functionality.
- To Manage Your Account and Subscriptions: To handle billing, process payments, and send you administrative communications.
- To Provide Customer Support: To respond to your inquiries and resolve issues.
- For Security and Fraud Prevention: To protect our Service, our users, and to comply with legal obligations.
4. Data Sharing and Disclosure
We do not sell your personal information. We only share your information with third-party service providers as necessary to operate our Service:
- Authentication: With Clerk to manage user sign-up and login.
- Payment Processing: With Stripe to handle payments for our subscription plans.
- Cloud Infrastructure: With Phala Cloud to provision the TEE and CVM that runs your OpenClaw instance.
- AI Models & Integrated Services: Your encrypted API keys and prompts are shared with the AI model providers (e.g., OpenAI) and integrated applications (e.g., Google) that you authorize, but this happens from within the secure TEE.
We may also disclose information if required by law or in response to valid requests by public authorities.
5. Data Retention and Deletion
We keep your personal information only as long as needed to provide our Service or as required by law.
- Deleting Your Account: You can delete your account at any time from your dashboard. When you do, we will start the process of permanently erasing your data. Your data will be fully erased from our live systems within 30 days and from our backups within 90 days.
- Inactive Accounts: Accounts that have not been used for 12 consecutive months are considered inactive. We will notify you by email before we delete your account. If you do not log in, your account and all data will be permanently deleted.
6. Your Data Rights (GDPR & CCPA)
We provide our Service globally and extend data rights to all our users. You have the right to:
- Access: Request access to the personal information we hold about you.
- Rectification: Request correction of inaccurate personal information.
- Erasure: Request deletion of your account and personal data.
- Data Portability: Request a copy of your data in a machine-readable format.
You can manage, update, or delete most of your information directly from your Clawdi dashboard. To exercise any of these rights, please contact us at [email protected].
7. International Data Transfers
Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We ensure that appropriate safeguards are in place for any such transfers.
8. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have, we will take steps to delete such information.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Goodwill Labs Inc.
[email protected]