Privacy Policy

This policy explains what data we collect, how we use it, and what we never do with it. EcomClaw is operated by StoryClicks Inc. (“EcomClaw,” “we,” “us”).

What we collect

• Account data — your email address, name, and workspace details, used for sign-in (magic link), billing, and support.
• Payment data — handled entirely by Stripe. We never see or store your card number.
• Data your agent works with — when you connect tools like Shopify, Meta Ads, or Klaviyo, your agent reads and processes data from those accounts (products, orders, campaigns, analytics) to do its job. Results, conversations, and generated assets are stored in your workspace so you can review them.
• Credentials — API keys and tokens you connect are encrypted with AES-256 envelope encryption and decrypted only at the moment a skill needs them. See our security overview.
• Usage analytics — we use PostHog to understand how the product and website are used, including session replays on our website with input fields masked. We don’t track you across other websites or sell analytics data.

What we never do

• We never sell your data.
• We never share your data with advertisers.
• We never use your store data, conversations, or content to train AI models — ours or anyone else’s.
• Our support team only accesses your workspace when you ask for help, and only to the extent needed to help you.

How we use your data

We use the data above to:

• Run your account, your agent, and your workspace
• Process payments and credit top-ups
• Send transactional emails (sign-in links, receipts, important service updates)
• Provide support and improve the product

Chat channels

If you connect WhatsApp, Telegram, or Slack, messages you exchange with your agent on those channels are processed and stored in your workspace so the conversation works across devices and the dashboard. Those platforms have their own privacy policies.

Third-party services

We rely on trusted third-party providers to run EcomClaw, across payments, hosting and infrastructure, AI models, email, analytics, and security. These currently include Stripe, Vercel, Convex, Anthropic, Google, Trigger.dev, Kie.ai, Kernel, Resend, PostHog, Braintrust, Cloudflare, Fly.io, and Infisical.

Each has its own privacy policy and processes data only to provide its service to us.

What happens when you cancel

You can export your data before you go. After cancellation, your workspace is removed under our retention policy. Your unused credit balance is kept for 90 days — resubscribe within that window and it is still there. We keep basic account and billing records for legal and accounting purposes.

Your rights

Wherever you are — including under GDPR and UK GDPR — you can ask us what data we hold about you, ask us to correct or delete it, and export your data at any time. Reach us via the contact form, on Discord, or at support@ecomclaw.co.

Changes to this policy

If we change this policy, we’ll update the date at the top and notify you by email if the change is significant.