Legal
Privacy Policy
Effective: March 25, 2026 · OneZeroEight.ai · Temecula, CA
1. Who We Are
IceClaw is operated by OneZeroEight.ai, located in Temecula, California, USA. We provide governed OpenClaw hosting on Iceland infrastructure. You can reach us at info@iceclaw.online for any privacy-related questions or requests.
2. What Data We Collect
Account data: When you create an account, we collect your email address and authentication credentials via Clerk, our identity provider. Payment data: Payment processing is handled by Stripe (card payments) or BTCPay Server (Bitcoin/Lightning payments). We do not store your full card number or payment credentials. Stripe retains payment data under their own privacy policy. Usage data: We collect logs of agent actions, API calls, and container activity through our SILA audit layer. This data is used to enforce governance, debug issues, and calculate usage against your included exchange allocation. Container data: Your OpenClaw workspace files, agent configurations, conversation history, and memory files are stored in your dedicated container on our Iceland infrastructure. This data does not leave Iceland except when your agents make outbound API calls to your chosen LLM providers. Technical data: Standard server logs including IP addresses, request timestamps, and browser/client information collected by Vercel (our frontend host) and our Iceland VPS.
3. How We Use Your Data
We use your data to: — Provide and operate the IceClaw service — Process payments and manage your subscription — Enforce governance layers (KARMA, SILA, BODHI, NIRVANA, DHARMA) — Send transactional emails (account confirmation, payment receipts, service notices) — Debug technical issues and maintain service reliability — Comply with applicable laws and regulations We do not sell your data. We do not use your data to train AI models. We do not share your data with third parties except as described in this policy.
4. LLM Providers and Data Routing
IceClaw includes 2,000 Mistral Nemo exchanges per month as part of your subscription. When you use included exchanges, your agent prompts and responses are processed by Mistral AI, a French company headquartered in Paris, France. Mistral AI processes data under EU GDPR jurisdiction. Mistral AI does not use your API data to train their models under their commercial terms. If you use BYOK (Bring Your Own Key) with Claude, GPT, Gemini, or any other provider, your data is sent directly from your Iceland container to that provider under their respective terms. IceClaw has no visibility into BYOK API calls and is not responsible for third-party provider data handling. Cryptocurrency payments are processed by BTCPay Server running on our Iceland infrastructure. Bitcoin and Lightning Network transactions are public by nature of the blockchain.
5. Data Storage and Retention
Your container data (workspace files, agent memory, conversation history) is stored on our Iceland VPS hosted at Verne Global's data center in Reykjavík, Iceland. This infrastructure operates on 100% renewable energy and is subject to Icelandic and EU data protection law. We retain your container data for 30 days after account cancellation, then permanently delete it. You may request immediate deletion at any time by emailing info@iceclaw.online. Audit logs (SILA layer) are retained for 90 days for governance and debugging purposes, then permanently deleted. Payment records are retained for 7 years as required by applicable tax law.
6. Your Rights
Under GDPR and applicable privacy law, you have the right to: Access: Request a copy of all personal data we hold about you. Correction: Request correction of inaccurate personal data. Deletion: Request deletion of your personal data ("right to be forgotten"). Portability: Request your data in a machine-readable format. Objection: Object to processing of your personal data. Restriction: Request that we restrict processing of your data. To exercise any of these rights, email info@iceclaw.online. We will respond within 30 days. For deletion requests, we will confirm deletion within 30 days and permanently remove your container data, account data, and all associated records except where retention is required by law (payment records).
7. Cookies and Tracking
IceClaw uses minimal tracking. Our frontend is hosted on Vercel, which collects standard server logs. We use Clerk for authentication, which sets session cookies necessary for account access. We do not use advertising trackers, third-party analytics beyond Vercel's infrastructure logs, or persistent tracking cookies. You may disable cookies in your browser settings. Disabling session cookies will prevent you from logging in to your account.
8. Security
We implement multiple security layers through SammaSuit governance infrastructure: BODHI process isolation (dedicated container per user), NIRVANA kill switch capability, SILA audit logging, and DHARMA model routing controls. Data in transit is encrypted via TLS. Data at rest on Iceland infrastructure is protected by Verne Global's physical and logical security controls. Despite these measures, no system is perfectly secure. We will notify affected users of any data breach that poses a risk to their rights within 72 hours of becoming aware of it, as required by GDPR.
9. International Transfers
Your container data is stored in Iceland, which is subject to EEA data protection standards equivalent to GDPR. When you use included Mistral Nemo exchanges, data is processed in France (EU). When you use BYOK providers, data may be processed in jurisdictions outside the EU including the United States. We are based in California, USA. By using IceClaw, you acknowledge that some data processing may occur in the United States in connection with account management, payment processing, and frontend hosting via Vercel.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email to the address on your account at least 14 days before changes take effect. Continued use of IceClaw after changes take effect constitutes acceptance of the updated policy.
11. Contact
OneZeroEight.ai Temecula, California, USA info@iceclaw.online For GDPR-specific inquiries, please include "GDPR Request" in your subject line.