Privacy Policy

1 Information We Collect

We collect the minimum data necessary to provide our service.

Information you provide directly:

• Account data — If you create an account: email address and a hashed password. We never store passwords in plain text.
• Payment data — If you subscribe to Pro: billing is handled entirely by Stripe. We receive only a subscription status flag — no card numbers, no bank details.
• Video URLs — When you submit a URL for processing, it is sent to our server, processed in memory, and the transcript is returned. We do not log or store your submitted URLs.

Information collected automatically:

• Usage metadata — Server logs may capture IP address, timestamp, and HTTP method for security and abuse-prevention purposes. These are rotated within 7 days.
• Browser localStorage — Your grab count, history, and settings are stored locally in your browser only. We cannot read this data.

2 How We Use Your Data

We use collected information to:

• Provide, operate, and maintain ClawGrab
• Process transactions and send related information (receipts, subscription confirmations)
• Detect and prevent abuse, fraud, or violations of our Terms of Service
• Respond to support requests
• Comply with legal obligations

We do not:

• Sell your personal data to any third party
• Use your submitted URLs or extracted transcripts to train AI models
• Share your email address with advertisers
• Build behavioral profiles for advertising purposes

3 Data Storage & Security

Our backend services are hosted on Render (US-based infrastructure). Account data is stored in Supabase (PostgreSQL). Both providers use industry-standard encryption at rest and in transit (TLS 1.2+).

Video processing happens entirely in-memory. No transcript text is written to disk or stored in any database after your request completes.

4 Third-Party Services

ClawGrab integrates with the following third-party services, each with their own privacy policies:

• Stripe — Payment processing. stripe.com/privacy
• Supabase — User authentication and account data. supabase.com/privacy
• Render — Backend hosting. render.com/privacy
• Netlify — Frontend hosting. netlify.com/privacy

These services may collect their own analytics (e.g., CDN logs). We have no control over their data practices beyond our service agreements with them.

5 Cookies & Local Storage

ClawGrab uses minimal cookies:

• Session cookie (if logged in) — Keeps you signed in. Expires when you close your browser or after 30 days.
• Preference cookie — Remembers your theme or UI settings.

We use localStorage (not cookies) to store your grab history and usage counter. This data never leaves your device and you can clear it at any time via your browser's dev tools or the Settings panel in the app.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

6 Data Retention

• Account data — Retained while your account is active. Deleted within 30 days of account deletion request.
• Payment records — Retained for 7 years as required by financial regulations. Stored by Stripe, not ClawGrab.
• Server logs — Rotated and deleted within 7 days.
• Processed URLs/transcripts — Not retained. Processed in-memory and discarded immediately.

7 Your Rights

Depending on your location, you may have the following rights:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate data.
• Deletion — Request deletion of your account and associated data ("right to be forgotten").
• Portability — Receive your data in a machine-readable format.
• Objection — Object to certain types of processing.
• Withdraw consent — Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at privacy@getclawgrab.com. We will respond within 30 days.

If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.

8 Children's Privacy

ClawGrab is not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

9 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email at least 14 days before the changes take effect.

Your continued use of ClawGrab after changes become effective constitutes your acceptance of the revised policy.

10 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

For general support inquiries, please use support@getclawgrab.com.