At HawlHox, your privacy is foundational — not an afterthought. This policy explains exactly what we collect, why we collect it, and how your data is handled. We've written it in plain language so there's no ambiguity.
1. Information We Collect
- Account information: your email address and name when you sign up via our authentication provider (Clerk).
- Payment data: processed entirely by PayPal. HawlHox never stores your card number, billing address, or payment credentials.
- Deployment configuration: project names and domain settings you enter during the deploy flow, stored only to provision your service.
- Usage metadata: anonymous logs such as deploy timestamps and error codes — never conversation content.
2. What We Never Collect
We are architected so that we cannot access the most sensitive parts of your deployment:
- Your LLM API keys (OpenAI, Anthropic, Gemini, etc.) — stored only inside your private VPS.
- Your agent's conversation history — processed entirely on your server, never routed through HawlHox.
- Your gateway token or OpenClaw credentials after deployment completes.
- Any personal data your agent collects on your behalf from your end-users.
3. How We Use Your Information
- To provision and configure your OpenClaw VPS deployment.
- To send transactional emails (deployment confirmation, receipts).
- To diagnose deployment failures and improve our platform reliability.
- We do not sell, rent, or share your personal information with any third party for marketing purposes — ever.
4. Third-Party Services
HawlHox integrates with the following trusted services:
- Clerk — authentication and user account management.
- PayPal — payment processing. Subject to PayPal's own privacy policy.
- Coolify / VPS provider — infrastructure provisioning for your agent's server.
5. Data Retention
We retain your account information for as long as your account is active. Deployment configuration data is retained for support purposes and deleted upon account deletion request. You may request deletion of your data at any time by contacting us at the email below.
6. Security
All data in transit is encrypted via TLS. Your VPS environment uses encrypted storage at rest. We apply least-privilege access principles — no HawlHox employee can access your deployed agent's runtime data or API keys.
7. Your Rights
Depending on your jurisdiction you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at:
✉️ HawlHox119@gmail.com8. Changes to This Policy
We may update this policy as our product evolves. We will notify registered users of material changes via email. Continued use of HawlHox after changes constitutes acceptance of the revised policy.