Privacy Policy

1. Data Controller

Clavex AI is the data controller for personal data processed in connection with this service. Contact: [email protected]

2. Data We Collect

We collect: your name and email address (for your account), payment confirmation details (method and notes, no card numbers), your agent configuration (agent name, persona), channel tokens you provide (encrypted), and usage statistics from your OpenRouter sub-key (if using our managed key).

3. How We Use Your Data

We use your data solely to provide the service: provisioning your agent, sending service communications, and processing payments. We do not use your data for advertising, profiling, or training AI models.

4. Data Storage and Security

All data is stored in Germany (Nuremberg, Hetzner Cloud). API keys and sensitive credentials are encrypted at rest using AES-256-GCM. Each user's agent data is isolated in a dedicated container with restricted file permissions.

5. Data Retention

Your data is retained for the duration of your subscription plus 30 days after cancellation. After that period, all data is permanently deleted. You may request deletion at any time by contacting us.

6. Your Rights (GDPR)

You have the right to access, correct, export, or delete your personal data. You have the right to object to processing and to lodge a complaint with your supervisory authority. Contact [email protected] to exercise any of these rights.

7. Third-Party Services

We use Hetzner Cloud (EU) for hosting, Brevo (EU) for transactional email, OpenRouter for AI API routing, and Cloudflare for DNS. Each provider is bound by appropriate data processing agreements.

8. Cookies

The marketing site does not use tracking cookies. The application uses a single localStorage token for authentication. No third-party tracking or analytics scripts are loaded.

9. Contact

Privacy inquiries: [email protected]