Privacy Policy

Who we are

Claw Studio operates the ClawStud app and this website. For anything in this policy, including access, correction or deletion requests, write to [email protected].

For the business data you load into ClawStud (your customers and orders), you are the data controller and Claw Studio acts as your processor. For your own account and for visits to clawstud.com, Claw Studio is the controller.

Your account

When you create a ClawStud account we store:

• Your name, email address and organization name.
• Your password, stored only as a bcrypt hash — we cannot read it.
• Session and refresh tokens, stored hashed, so you stay signed in.
• A device identifier (Apple’s identifierForVendor) tied to your session.

Push notifications

If you enable notifications, the app registers your device so we can alert you when a new order arrives. We store the Apple push token, the platform and environment, your OS version, app version, device model, locale and time zone. Push is optional; the app works without it, and revoking the permission stops the delivery.

Your business data

ClawStud shows the stores, orders, customers, products and suppliers that you create or that we sync from a store you connect. That includes personal data about your own customers — names, email addresses and shipping addresses. We store it to provide the service, we do not sell it, and we do not use it to train anything or for our own marketing.

Payments

If you connect Stripe, we store your Stripe account identifier and OAuth tokens, encrypted at rest, with read-only scope. We never see or store card numbers: payments are handled by Stripe under its own privacy policy.

Client portal (clawstud.com/portal)

The client portal gives you a unified view of your business metrics. It has a free plan and two paid monthly plans; there is no free trial. Paid plans are charged to a credit or debit card via Stripe; we never see or store card numbers. Subscriptions auto-renew until you cancel.

When you sign up we store your email and a hash of your password, and email you a one-time link to confirm the address; the account works once it is confirmed. When you subscribe, Stripe sends us a webhook with your email and subscription ID and we store the subscription status. Sessions are stored as a random token in an HTTP-only cookie for 30 days. The portal runs on Cloudflare Workers, with its data in Cloudflare D1.

If you connect Google, we request OAuth tokens with scopes for Google Analytics (read-only) and Google Search Console (read-only). We use them to display your traffic and search performance inside the portal. We never write to your Google account.

If you connect Stripe, you paste a Restricted Key from your Stripe dashboard into the portal. We encrypt it with AES-256-GCM and store it on your account. We use it to read your MRR, balance, customer count and active subscriptions. The key never leaves the Worker in plaintext. We never write to your Stripe account — permissions are read-only by the choice of Restricted Key you create.

You can cancel at any time from the Billing tab: it opens Stripe's hosted billing portal where you can also update your card and view invoices. After cancellation, your access remains until the end of the current paid period.

You can disconnect any integration at any time from the Integrations tab; the OAuth tokens are deleted immediately and an entry is added to the audit log.

Visit analytics (the pixel)

If you install the ClawStud pixel on your own website, each visit records the path, referrer, UTM parameters, approximate country, region and city, device type, browser, operating system, a session identifier and a visitor identifier.

We never store the visitor’s IP address. It is hashed with a salt that rotates every day, which means the same visitor cannot be linked across two different days. There are no advertising cookies and no cross-site tracking. Whether you need a consent banner on your own site depends on your jurisdiction and is your responsibility as the site owner.

Crash reports

If the app crashes, it writes a report locally and uploads it on the next launch so we can fix the fault. Reports contain technical diagnostics — the error, the call stack and app and device version — not the contents of your account.

This website

clawstud.com uses Google Analytics 4 to count visits and to see which pages are read. It also records when someone taps the WhatsApp contact button. Google acts as a processor and may store data outside the EU under its own safeguards.

Where the data lives

The backend runs on Vercel, with the database hosted by Neon in the United States. The pixel runs on Cloudflare Workers, with visit data in Cloudflare D1. Push notifications go through Apple. Emails such as password resets are sent through our email provider. Transfers outside the EU rely on the standard contractual clauses those providers offer.

How long we keep it

Account and business data are kept while your account exists. Deleting your account removes it, as described below. Visit analytics are kept in aggregate; the daily salt rotation means the identifiers behind them stop being linkable after 24 hours. Crash reports are kept while they are useful for fixing the fault.

Deleting your account

You can delete your account from inside the app: Settings, then “Eliminar cuenta”, then confirm. If you are the only member of your organization, the organization and all of its data — stores, orders, customers, devices and tokens — are deleted with it. If other people belong to the organization, your user is deleted and their data continues. The deletion is immediate and cannot be undone.

You can also ask for access, correction, portability, restriction or objection by writing to [email protected]. If you are in the EU you may also complain to your national data protection authority; in Spain that is the AEPD.

Children

ClawStud is a tool for businesses and is not directed at children under 16.

Changes

If this policy changes materially we will update the date at the top and, where the change affects you, tell you in the app.