Back to home

Privacy Policy

Last updated: March 16, 2026

1. Data Controller

k-claw is operated by Krokanti Games SL, a company registered in Spain. For questions about this Privacy Policy, contact us at hello@krokanti.com.

2. Data We Collect

We collect the minimum data necessary to provide the service:

  • Account data: your name and email address when you sign in via Krokanti Account (SSO).
  • Server connection data: hostname, IP address, operating system, RAM, and connector daemon version of servers you connect to k-claw.
  • Agent configurations: agent names, AI model settings, channel configurations, skills, and scheduled tasks you create.
  • Usage data: page views, feature usage, and error logs collected in aggregate, never tied to individual users.
  • Payment data: handled entirely by Stripe. We never store your card details.

3. Legal Basis (GDPR)

We process your data under the following legal bases:

  • Contract performance: to provide the k-claw service you subscribed to, including server management, agent deployment, and workflow orchestration.
  • Legitimate interest: to improve the service, detect abuse, and ensure security of the platform and connected servers.
  • Consent: for optional communications such as product updates and newsletters.

4. Server Connection Data

When you connect a server to k-claw, our connector daemon communicates with our platform via outbound HTTPS requests only. No inbound ports are opened on your server. Server tokens are hashed before storage. Agent deployment commands and file operations are transmitted via encrypted channels. We do not access or store the content your AI agents process. Agents run entirely on your infrastructure.

5. Third-Party Services

  • Stripe: processes subscription payments. See stripe.com/privacy.
  • Vercel: hosts the k-claw web application. See vercel.com/legal/privacy-policy.
  • Neon: database hosting (EU servers). Stores your account, server, and agent configuration data.

6. Data Retention

We retain your data as long as your account is active. Server connection data and agent configurations are deleted when you remove them from the platform. If you cancel your subscription, your data is retained for 30 days before permanent deletion. You can request immediate deletion by emailing hello@krokanti.com.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and all associated data.
  • Object to or restrict processing.
  • Data portability.

To exercise any right, email hello@krokanti.com.

8. Cookies

We use essential cookies for authentication and preferences. See our Cookie Policy.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the app. Continued use of the service constitutes acceptance.