Trust

What we believe about your data

Your work belongs on your computer. Clawless Computer is a local-first desktop application: conversations, settings, and memory tiers live in a SQLite database in your app data folder, and the only data that ever leaves your Mac is the data you explicitly route through a third party you have configured.

What stays on your Mac

The following live on your computer, in your app data folder, and never travel to any server we operate:

• Your conversations with the agent
• Your memory entries (facts the app remembers about you)
• Your agents and skills
• Your settings, including API keys for every AI provider you connect
• Browser-automation session state (cookies, local storage, history for the bundled Chromium)
• License state and the local consent ledger
• Anything else you create inside the app

What leaves your Mac, and where it goes

Three categories of network traffic leave your Mac when you use Clawless Computer. Each is described below, and each is either fully under your control (BYOK) or scoped narrowly to a single purpose (license validation, Help mode).

1. BYOK queries to the AI provider you choose

When you send a chat message, Clawless Computer reads your prompt and sends it directly from your computer to whichever provider you have configured (Anthropic, OpenAI, Google, Groq, or any other provider you supply an API key for). The connection is between your computer and the provider; we do not proxy the call through any server we run, and we do not see, store, or relay your prompts or responses. You supply the API key, you choose the model, you control the relationship with the provider under their own privacy policy.

2. Help mode queries to kb.clawless.ai

When you turn on Help mode from the chat toolbar, your typed question and an opaque per-session identifier travel to kb.clawless.ai, which runs on Cloudflare Workers and uses Cloudflare AI Gateway in front of Anthropic Haiku and Claude Sonnet. The service returns answers and citations drawn from our public documentation. A record of your help conversation is retained for up to 10 minutes of inactivity to support multi-turn follow-up questions, then deleted automatically. We do not link this record to your Clawless account, your IP address beyond edge logging, or any other identifying information. If you do not turn on Help mode, no requests reach this service.

3. License validation to Lemon Squeezy

Your license key and a short device fingerprint (your computer's hostname plus a hash of platform and architecture) travel to Lemon Squeezy when the app activates or validates your license. The fingerprint lets Lemon Squeezy show a human-readable name in your activation list so you can recognize and free a specific machine later. The app checks once per 24 hours while open and once on launch; if your computer is offline, the app keeps working using the last successful validation, with a 30-day offline grace window.

What is not there

Clawless Computer does not run analytics, crash telemetry, session replay, fingerprinting, or any other passive data collection. There is no Clawless-controlled cloud storage; we do not hold a copy of your conversations, your prompts, your memory entries, or your work on any infrastructure we operate.

Subprocessors

For the full list of third parties that may receive data when you use Clawless Computer, including each one's role and when it is engaged, see our subprocessors page. The desktop application also enumerates its own subprocessor list under Settings, Legal, Subprocessors, because the in-app list depends on which AI providers you choose to connect.

Your rights

Because the vast majority of your data sits on your computer, most rights are exercised by you, on your computer, without involving us:

• Export. Settings, Legal, Export My Data writes a single zip file built from an explicit allow-list: the app database (settings, conversations, memory entries, consent ledger, license cache), the OpenClaw engine working tree, and your installed skills. Every JSON file is scanned and any field whose name suggests a credential (token, secret, key, password, webhook) is replaced with the placeholder "redacted-on-export" before the zip is written. A manifest at the root of the archive lists what was excluded, what was redacted, and what was retained.
• Delete. Settings, Legal, Delete All My Data wipes the local database, removes your installed skills, and resets the app. When your computer is online at the time of deletion, the app also calls Lemon Squeezy to release your activation slot so you can re-use the same license key on another machine.
• Rectify. You can edit memory entries directly in the Memory panel and delete individual conversations from the chat sidebar.
• Disconnect at any time. Remove any AI provider, channel, or MCP server from Settings; the connection ends immediately.

Verification

You do not have to take our word for the claims on this page. The full in-app privacy policy lives at Settings, Legal, Privacy Policy and describes every category of data the app holds, where it lives, and where it travels. The marketing site's privacy notice covers what this website itself collects (nothing beyond standard host-level metadata at the Cloudflare edge). For the desktop application, our practice is that no content of your work or prompts leaves your device by default; the BYOK connections you configure are the only data flows that send prompts off your computer, and they go directly to the provider you chose.

Contact

For privacy and data-rights questions, contact [email protected]. For suspected security vulnerabilities, contact [email protected]; we aim to acknowledge within five business days, per the published responsible-disclosure policy.