Privacy Policy

Claw as a Service ("CaaS," "we," "our," or "us") is a managed AI deployment platform operated by Wherk AI, LLC. This policy applies to our marketing website, customer portal, onboarding workflow, support communications, and the managed infrastructure we operate on behalf of customers.

If your employer, client, or organization signed up for CaaS, we may process data on that organization's behalf. In that case, the customer remains responsible for its instructions to us and for making sure it has the right to share the data it connects to the service.

We collect information in a few different ways:

• Contact and lead data. If you submit a demo request, contact form, or lead form, we collect the details you provide, such as your name, work email, company name, message, and referral source.
• Account and organization data.When you sign in or create an organization, our authentication provider Clerk processes account identifiers, organization membership, and session data so we can secure the portal.
• Billing data. Stripe handles payment collection and subscription management for us. We receive billing status, customer identifiers, subscription details, and transaction metadata, but we do not store full payment card numbers on our servers.
• Customer configuration data.During onboarding and operation, we process the channels, roles, connected systems, deployment settings, and organization data needed to provision and run your CaaS environment.
• Usage, device, and service logs.We and our service providers may collect IP address, browser metadata, request logs, health checks, error reports, and similar telemetry needed to secure and operate the service.
• Cookie and local storage data.We use essential authentication technologies, and the site stores your cookie-consent preference locally in your browser.

We use the information described above to:

• provide, provision, maintain, and secure the CaaS platform,
• authenticate users and enforce organization access controls,
• process subscriptions, invoices, setup fees, and billing changes,
• respond to inquiries, onboard customers, and provide support,
• monitor service reliability, troubleshoot incidents, and prevent abuse,
• send transactional communications related to the service, and
• comply with legal obligations and enforce our agreements.

CaaS is designed around isolated customer environments. Each customer deployment runs on dedicated infrastructure, and access inside the product is intended to follow the role-based permissions configured for that customer.

We do not sell customer data. We do not use customer data connected to CaaS to train our own models. When model providers process prompts or completions to serve your organization, they do so as service providers in the delivery chain for the features you choose to use.

We share information only as needed to run the service, meet customer instructions, or comply with law. Our core providers may include:

• Vercel for hosting the website and customer portal,
• Clerk for authentication and organization management,
• Supabase for database and backend data storage,
• Stripe for billing and subscription processing,
• Resend for transactional email delivery,
• Sentry for error monitoring and diagnostics,
• infrastructure and DNS providers such as DigitalOcean, Hetzner, and Cloudflare where customer environments are deployed, and
• AI model and integration providers selected as part of a customer's configuration.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or asset sale.

We keep information for as long as needed for the purposes described in this policy, including to maintain active customer environments, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods vary by data type. For example, we generally retain account and billing records while an organization remains active, support records as needed for operational history, and logs for shorter periods based on security and reliability needs.

We use administrative, technical, and physical safeguards designed to protect data. These measures include encrypted connections, hardened customer VPS environments, access controls, security headers, monitoring, and managed secret handling. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

You may contact us to request access to, correction of, export of, or deletion of personal information we control, subject to applicable law and contractual obligations. You may also opt out of non-essential marketing emails by using the unsubscribe link in those messages.

If you use CaaS through an organization, we may direct your request to that organization when it is the party controlling the relevant data.

Our providers may process data in the United States and other countries where they operate. By using CaaS, you understand that information may be transferred to and processed in locations outside your state, province, or country, subject to applicable safeguards.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and may provide additional notice where appropriate.

Privacy questions or requests can be sent to support@wherk.com.