Privacy Policy

The Claw is an admin tool for Discord server owners and administrators. Customers decide whether to connect a server, which channels to expose through the API, whether to enable member self-service access, and whether to use external verification endpoints.

If you are a member of a connected Discord server, the server owner or administrator that enabled The Claw is responsible for their instructions to us and for the notices or consents they provide to their community.

We use collected information to operate, secure, and improve The Claw. This includes:

• Authenticating users with Discord and managing account access
• Installing and operating the bot, syncing server data, and routing requests to isolated storage
• Enforcing channel controls, key issuance rules, entitlement checks, and attachment access policies
• Serving API queries, attachments, dashboard workflows, and billing functions
• Measuring usage, calculating fees, and processing payments
• Detecting abuse, investigating incidents, preventing fraud, and complying with law
• Responding to support requests and improving reliability and product quality

We may disclose information in the following situations:

• Within a connected account or server workspace to the owners, administrators, and other users that customer authorizes
• To API clients or agents authenticated with keys issued by that customer for the channels and data they have chosen to expose
• To service providers and infrastructure vendors that help us run the Service, such as Discord, Stripe, Cloudflare, Vercel, and database providers including Neon
• To external verification services that a customer configures for access approval or denial
• When required by law, to protect rights or safety, or as part of a financing, merger, acquisition, or asset transfer

We do not sell customer data.

We retain account, configuration, and connected server data for as long as needed to provide the Service, maintain account history, enforce security controls, and support billing and dispute resolution.

When an account or connected server is removed, we will delete or de-identify active data within a commercially reasonable period, except where we need to retain records for legal, security, abuse-prevention, accounting, or backup purposes.

We use technical and organizational safeguards designed to protect The Claw, including:

• Encryption in transit
• Role-scoped credentials and access controls
• Per-server data isolation at the database boundary
• Secret rotation and server-side generation for sensitive credentials
• Monitoring, logging, and incident response practices
• Routine dependency and infrastructure maintenance

We use essential cookies and similar storage mechanisms to maintain sign-in state, protect sessions, and remember basic product preferences. We do not use third-party advertising cookies on the product.

Depending on your location, you may have the right to request that we:

• Provide access to personal information we hold about you
• Correct inaccurate or incomplete information
• Delete information where retention is no longer justified
• Export certain information in a portable format
• Restrict or object to particular processing activities

Account owners and administrators can also use The Claw's product controls to change channel exposure, disable API access, rotate or revoke keys, and manage access policies.

To submit a privacy request, contact support@theclaw.gg. If your request relates to a specific Discord server's use of The Claw, we may direct you to that server's owner or administrator first.

The Claw is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Service.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy here and revise the "Last updated" date.

For privacy questions, security questionnaires, or DPA requests, contact support@theclaw.gg.