Privacy Policy
Last updated: August 27, 2026
OpenClaw Hardware is operated by ID Robots Ltd (ЕИК: 202938346), registered at ul. Rogoshko shose 3, Plovdiv 4003, Bulgaria, EU. We operate the website clawbox.com and sell the ClawBox hardware product. This Privacy Policy explains how we collect, use, share, retain, and protect your information.
1. Information We Collect
Website Analytics
We use Google Analytics 4 (with Google Consent Mode v2), Microsoft Clarity (session replays and heatmaps), and Vercel Analytics to understand how visitors use our website. This collects:
- Pages visited and time spent
- Referring website or campaign
- Country and language preferences
- Device type and browser
Where analytics and advertising cookies are set depends on where you are. In regions whose law requires opt-in consent — the EU/EEA, the UK, Switzerland, and a number of others — they are only set after you accept our cookie banner, and if you decline, none are stored. Everywhere else they are set by default under a notice-and-opt-out model, and you can switch them off at any time using Your Privacy Choices below. We honor the Global Privacy Control browser signal everywhere, automatically.
Purchase Information
When you buy a ClawBox, we collect through our payment processor Stripe:
- Name, email address, and phone number
- Shipping and billing address
- VAT number (for business purchases)
We do not store or have access to your credit card details — these are handled entirely by Stripe.
Email & Newsletter
If you subscribe to our newsletter or enter your email during checkout, we store your email address to send order updates and occasional product news. You can unsubscribe at any time.
2. How We Use Your Information
- Process and ship your order
- Send shipping confirmation and tracking information
- Respond to support requests
- Operate and bill ClawBox AI subscriptions
- Improve our website and products
- Comply with legal obligations, including taxes and invoices
3. Who We Share Your Data With
| Recipient | What they receive | Purpose | Country or transfer note |
|---|---|---|---|
| Stripe | Name, email, billing and shipping address, order and payment metadata | Payment processing | Ireland / US |
| Vercel | IP address, request and device metadata | Website hosting | US / EU regions |
| Cloudflare | IP address, request headers, security logs | CDN and security | US / global edge |
| OpenAI | Website assistant conversations, subscription image, speech, and transcription requests | AI features | US |
| Anthropic | Subscription AI requests where selected | AI features | US |
| DeepSeek | Subscription AI chat requests | AI features | China — no European Commission adequacy decision applies, and Standard Contractual Clauses and a transfer impact assessment are not currently in place |
| Visitor identifiers, analytics and advertising events, hashed email for conversion measurement | Analytics and advertising | US / global | |
| Microsoft (Clarity) | IP, device, page interaction and session replay | Website analytics | US / global |
| Meta | Advertising and conversion events | Advertising | US / global |
| Redis host | Account records, order metadata, usage counters | Application storage | US / EU region |
| Trustpilot | Purchaser email and order event | Review invitations | Denmark |
| DHL Express | Recipient name, address, phone, email, shipment contents and value | International delivery | Germany / global network |
| Econt | Recipient name, address, phone, email, parcel data | Bulgarian delivery | Bulgaria |
| Telegram | Account identifier, message content | Messaging integration where you choose to use it | Global, under your own account relationship |
We do not sell your personal data.
4. ClawBox Product Privacy
Your ClawBox Device
ClawBox is built to keep your data on hardware you own. When your ClawBox runs local models, your prompts, files, and conversations stay on the device. They do not reach us and we cannot see them. We have no remote access to your device, its contents, or its configuration.
When Your ClawBox Uses Cloud AI
Your ClawBox can also use cloud AI providers. This happens in one of two ways, and they are different for your privacy.
You connect your own provider account. You supply your own API key for a provider such as Anthropic or OpenAI. Your requests go directly from your device to that provider under your own agreement with them. We are not involved and we see nothing.
You use a ClawBox AI subscription. Your prompt, image, speech, and transcription requests are sent through clawbox.com/api/ai on our infrastructure, which forwards them to the cloud AI provider on your behalf. The request content therefore passes through our infrastructure in transit. We do not store the content of your prompts, requests, or the model's replies. We meter usage per user to operate and bill the subscription, recording your account identifier, timestamps, model used, token counts, image counts, and audio duration.
What We Always Hold
Whether or not you use a subscription, we hold the records created by buying from us: your order, invoice, delivery address, and any support correspondence. Those are covered by the rest of this policy.
5. AI Features on This Website
Our website has an assistant you can type questions into. What you type is sent to our server and then to an AI model provider so it can answer you. Do not enter passwords, payment details, or other sensitive personal information into it.
The model providers used for this feature and their countries are listed in the recipients table above.
6. Cookies
| Cookie | Purpose | Consent |
|---|---|---|
| cookie-consent | Stores your cookie preference | Essential |
| _ga, _ga_* | Google Analytics | Consent where required, otherwise opt-out |
| _clck, _clsk | Microsoft Clarity — links your browser and session for replays and heatmaps | Consent where required, otherwise opt-out |
| CLID, ANONCHK, MUID, MR, SM | Microsoft third-party cookies set by the Clarity service (clarity.ms / bing.com) | Consent where required, otherwise opt-out |
| _fbp, _fbc | Meta advertising — a browser identifier and, if you arrived from a Meta ad, that ad click. Used to measure which adverts lead to orders. Stored for 90 days. | Consent where required, otherwise opt-out |
| currency | Selected currency preference | Essential |
Your Privacy Choices — Do Not Sell or Share My Personal Information
In regions where the law requires opt-in consent (EU/EEA, UK, Switzerland, and others), analytics and advertising cookies load only after you accept the cookie banner. Everywhere else they load by default, and you can switch them off here at any time. We never sell your personal information; our advertising measurement pixels (Google, Meta, Reddit) may qualify as "sharing" under the California Consumer Privacy Act, and this control is the opt-out for that. We also honor the Global Privacy Control browser signal automatically.
7. Your Rights (GDPR)
Under the EU General Data Protection Regulation, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Portability — receive your data in a portable format
- Objection — object to processing of your data
- Withdraw consent — at any time for analytics and advertising cookies, via Your Privacy Choices
To exercise any of these rights, contact us at [email protected]
8. How Long We Keep Your Data
| Data | Retention period | Reason |
|---|---|---|
| Invoices and accounting records | 10 years | Bulgarian accounting law |
| Order and delivery records | 10 years, aligned to the invoice | Same record set |
| Warranty records | Warranty term plus 1 year | Claims window |
| Customer support correspondence | 24 months from last contact | Service history |
| Website assistant conversations | 90 days | Support quality |
| Marketing lists and campaign logs | 24 months from last engagement, or immediately on unsubscribe | Consent hygiene |
| Website analytics and advertising identifiers | 14 months | Provider default |
| Portal account data | Life of the account plus 90 days | Account operation |
9. How We Protect Your Data
We use encryption in transit for all connections to our services. Access to systems holding customer data is limited to named members of our team and protected by individual credentials.
10. App Store & Third-Party Skills
The ClawBox App Store displays skills and integrations sourced from ClawHub, an open skill registry maintained by the OpenClaw community. App listings, ratings, descriptions, and availability are provided by ClawHub and third-party developers. OpenClaw Hardware (ID Robots Ltd.) does not control, endorse, or guarantee the accuracy, safety, or functionality of third-party skills. Use of third-party skills is at your own risk. When you install a skill on your ClawBox, it runs locally on your device — no data about your skill usage is sent to us or ClawHub.
11. Contact
ID Robots Ltd
ul. Rogoshko shose 3
Plovdiv 4003, Bulgaria, EU
ЕИК: 202938346
Email: [email protected]