Privacy Policy

1. Introduction

Krabb ("we", "our", "us") operates krabb.io, a cloud-based analytics and monitoring platform for OpenClaw AI agents. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials via Auth0. We also store your subscription plan and billing information processed through our payment provider.

Telemetry Data

We receive telemetry data that your OpenClaw agents send via the OpenTelemetry (OTLP) protocol. This includes: token usage metrics, cost data, execution traces, latency measurements, error logs, and agent status information. We do not collect your conversations, prompts, or agent outputs unless you explicitly configure your agents to send this data.

Usage Data

We automatically collect information about how you interact with our dashboard, including pages visited, features used, and timestamps. We use cookies and similar technologies to maintain your session and improve our service.

3. How We Use Your Information

• Provide, maintain, and improve our analytics platform
• Process and display your agent telemetry data
• Send alerts and notifications you configure
• Process payments and manage your subscription
• Send service-related communications
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

4. Data Retention

Telemetry data is retained according to your subscription plan: Starter (14 days), Pro (30 days), Team (90 days), Enterprise (custom). Account information is retained for the duration of your account and up to 30 days after deletion. Aggregated, de-identified analytics data may be retained indefinitely.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: Auth0 (authentication), payment processors, cloud infrastructure providers
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, API key authentication for OTLP endpoints, access controls, and regular security reviews. No method of transmission over the Internet is 100% secure, but we strive to protect your data.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; data portability; and withdraw consent. To exercise these rights, contact us at privacy@krabb.io.

8. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our service after changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy, contact us at privacy@krabb.io.