← Back to brewclaw.com

Privacy Policy

Effective date: 27 April 2026

We built BrewClaw to help people — not to collect data about them. This policy explains plainly what information we hold, why we hold it, and how you can control or delete it.

1. Who We Are

BrewClaw is operated by Divy Kairoth, based in Gurugram, India. When this policy says “BrewClaw,” “we,” “us,” or “our,” it refers to us.

If you have any questions about how we handle your data, email divy@brewclaw.com.

2. What We Collect

We collect the minimum information needed to provide the service.

DataWhy we collect it
Email addressTo create your account and send service communications
Name (optional)To personalise the experience if you provide it
Telegram user ID and bot tokenTo connect your Telegram bot and route messages to your AI
AI conversation messagesTo pass your messages to the AI model and return responses
Selected AI modelTo know which provider to route your requests to
Credit balance and usageTo track consumption and process top-ups
IP address and device infoFor security, fraud prevention, and debugging
Analytics eventsTo understand how people use the product and improve it

We do not collect payment card details directly — payments are handled by our payment processor who is PCI-DSS compliant.

3. How We Use Your Data

We use your information to:

  • Create and maintain your account
  • Relay your messages to the AI model you selected and return the responses
  • Track credit usage and process payments
  • Send transactional emails (account verification, password reset, billing receipts)
  • Improve the product by understanding how features are used
  • Detect and prevent abuse, fraud, and security incidents
  • Comply with legal obligations

We do not sell your personal data. We do not use your conversations to train AI models. We do not send marketing emails without your explicit opt-in.

4. Third Parties

Running BrewClaw requires us to share certain data with trusted third-party services. Here is who they are and what they see:

ProviderPurposeData shared
Anthropic / OpenAI / GoogleAI model processingYour messages and conversation context
TelegramMessaging channelYour bot token and chat messages
VercelHosting and deploymentRequest logs, IP addresses
Neon (PostgreSQL)DatabaseYour account and usage data
ResendTransactional emailYour email address and email content
Umami AnalyticsProduct analyticsAnonymised page views and events

We choose providers that are privacy-conscious and compliant with applicable regulations. We do not share your data with advertisers, data brokers, or any third party for marketing purposes.

5. Data Storage and Security

Your data is stored in cloud infrastructure primarily located in the United States (Vercel, Neon). By using BrewClaw, you consent to your data being processed in these locations.

We use industry-standard security practices: encrypted connections (HTTPS/TLS), hashed passwords, access controls, and regular security reviews. No system is 100% secure. If you discover a security issue, please report it to divy@brewclaw.com.

6. Data Retention

We retain your account data for as long as your account is active. Conversation logs are retained for up to 90 days by default to allow your AI to reference recent context. You can request earlier deletion at any time.

When you delete your account, we delete your personal data within 30 days. Anonymised analytics and aggregated usage data may be retained longer.

We may retain certain data longer if required by law (e.g. financial records for tax purposes).

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate data
  • Deletion — request that we delete your data
  • Portability — request your data in a machine-readable format
  • Objection — object to certain types of processing
  • Withdrawal of consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email divy@brewclaw.com. We will respond within 30 days.

8. Cookies and Analytics

BrewClaw uses a small number of cookies to keep you logged in and remember your preferences. We do not use third-party advertising cookies.

For analytics, we use Umami — a privacy-friendly, cookieless analytics tool that does not track individuals across sites, does not use fingerprinting, and does not share data with third parties. All analytics data is anonymised.

9. Children

BrewClaw is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13 without parental consent, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy as the product evolves. When we make significant changes, we will notify you by email or through a notice in the app at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the most recent version.

11. Contact

Privacy questions, data requests, or concerns? Email divy@brewclaw.com. We take privacy seriously and will respond within 3 business days.

BrewClaw is operated by Divy Kairoth, Gurugram, Haryana, India.