Privacy Policy

Last updated: February 21, 2026

1. Information We Collect

When you sign in via GitHub OAuth, we collect:

• GitHub username — used as your public identity on ClawSouls
• Display name — shown on your profile and published souls
• Email address — for account identification (not publicly displayed)
• Avatar URL — your GitHub profile picture
• GitHub ID — unique identifier for authentication

2. How We Use Your Information

• Authentication — to verify your identity and maintain your session
• Profile display — your username and avatar appear on souls you publish and reviews you write
• Service operation — to provide, maintain, and improve ClawSouls

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Cookies

We use essential cookies for:

• Session management — NextAuth session cookie to keep you signed in
• CSRF protection — security token to prevent cross-site request forgery

We do not use analytics, advertising, or tracking cookies.

4. Data Storage & Retention

• Your data is stored on Supabase (PostgreSQL) hosted in the United States (US East).
• We retain your account data for as long as your account is active.
• Published souls and reviews are retained unless you delete them or they are removed for policy violations.

5. Data Sharing

We may share data only in these circumstances:

• Public content — Souls you publish and reviews you write are publicly visible by design. Published soul metadata and file contents are accessible via our public API, MCP servers, and may appear in third-party directories that index ClawSouls content.
• Legal requirements — If required by law, regulation, or valid legal process.
• Service providers — Vercel (hosting), Supabase (database), GitHub (authentication) process data on our behalf.

6. Your Rights

You have the right to:

• Access your personal data
• Delete your account and associated data
• Export your published souls
• Withdraw consent by revoking GitHub OAuth access

To exercise these rights, contact us at the email below.

7. International Users

If you are located in the European Union (EU/EEA), your data is processed under legitimate interest for providing the service. If you are in South Korea, we comply with the Personal Information Protection Act (PIPA).

8. Children

ClawSouls is not intended for users under 13 years of age. We do not knowingly collect data from children.

9. Changes

We may update this policy from time to time. Significant changes will be announced on the site.

10. Contact

For privacy inquiries: contact@clawsouls.ai

ClawSouls is operated by ClawSouls. Trademark Registration: 40-2026-0032591 (Republic of Korea).