Privacy Policy | ClawReel - AI Video Director Agent

Last updated: March 16, 2026

1. Introduction

AIGenesis Labs Limited ("Company", "we", "us", "our"), a company incorporated in Hong Kong, operates ClawReel ("Service") at clawreel.ai.

This Privacy Policy describes how we collect, use, store, and protect your information when you use the Service. We are committed to safeguarding your personal data in compliance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and, where applicable, the EU General Data Protection Regulation (GDPR).

By using the Service, you agree to this Privacy Policy and our Terms of Service.

2. Information We Collect

2.1 Account Information

Name, email address, and profile information provided during registration. You may register via email/password, Google OAuth, or GitHub OAuth.

2.2 Payment Information

Billing details are processed by Stripe. We do NOT store your credit card numbers directly -- Stripe handles all payment data in accordance with PCI DSS requirements.

2.3 Usage Data

Pages visited, features used, credit consumption, video generation requests, and API usage metrics.

2.4 Device and Technical Data

IP address, browser type, operating system, device identifiers, and access timestamps.

2.5 User Content

Scripts, prompts, images, and other content you submit for AI video generation. This includes the generated video outputs produced by the Service.

2.6 Communication Data

Support emails, feedback submissions, and other correspondence with our team.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Process payments and manage your subscriptions
Improve and develop new features and functionality
Send transactional emails (account verification, password reset, billing receipts)
Monitor for abuse, fraud, and violations of our Terms of Service
Comply with legal obligations under applicable law

Our commitment: We use your information solely to provide and improve ClawReel. We do not sell your personal data to third parties.

4. AI-Specific Data Handling

4.1 Content Processing

User-submitted scripts and content are processed by AI models to generate video outputs. This processing is necessary to provide the core Service functionality.

4.2 Model Training

We do NOT use your content to train or fine-tune our AI models. Your scripts, prompts, and generated outputs are not incorporated into model training data.

4.3 Generated Output Ownership

You retain full ownership of all content generated through the Service, subject to our Terms of Service. Your generated videos, images, and other outputs belong to you.

4.4 Content Retention

User content is stored in encrypted cloud storage. You may delete your content at any time through your account settings. When you delete content, it is removed from our active systems within 30 days.

Your creative content is yours. We process it to generate your videos, but we never use it to train AI models.

5. Third-Party Services

We use the following third-party services to operate ClawReel. Each processes limited data as described:

Service	Purpose	Data Shared
Stripe	Payment processing	Billing info, subscription data
Google	OAuth authentication	Email, name, profile picture
GitHub	OAuth authentication	Email, username, profile picture
Cloudflare R2	Cloud storage	User-uploaded and generated content
Resend	Transactional email	Email address, email content
Discord	Notifications	System event data (no personal user data)

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies for details on how they handle your data.

6. Cookies and Tracking

We use the following types of cookies:

Essential cookies: Required for session management and authentication. These cannot be disabled.
Analytics cookies: Used to understand Service usage patterns via Vercel Analytics. These help us improve the Service.
No advertising cookies: We do not use third-party advertising cookies or tracking pixels.

You can control non-essential cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

7. Data Storage and Security

We take the security of your data seriously:

Data is stored on servers in the United States and distributed via Cloudflare's global network
All data in transit is protected by industry-standard encryption (TLS 1.2+)
Data at rest is encrypted using AES-256 or equivalent encryption standards
Access controls and audit logging are in place for internal data access
We regularly review and update our security practices

8. Cross-Border Data Transfer

As a Hong Kong-based company operating a global service, your data may be transferred to and processed in countries outside your jurisdiction.

We ensure appropriate safeguards for cross-border data transfers as required by the PDPO and GDPR:

For EU/EEA users: transfers are conducted under Standard Contractual Clauses (SCCs) where applicable
We select data processors that maintain adequate data protection standards
We conduct data protection impact assessments where required

Data transfer notice: Your data may be processed outside your home country. We apply appropriate safeguards to protect your data regardless of where it is processed.

9. Data Retention

We retain your data for the following periods:

Account data: Retained while your account is active and for 30 days after account deletion
Payment records: Retained as required by applicable tax and financial regulations (typically 7 years)
Usage logs: Retained for 90 days for security monitoring and debugging purposes
User content: Retained until you delete it, or for 30 days after account termination
Communication data: Retained for the duration of your account plus 12 months

Under the PDPO and GDPR, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your data ("right to be forgotten")
Portability: Request your data in a structured, machine-readable format
Object: Object to certain types of data processing
Withdraw consent: Withdraw your consent to data processing at any time

To exercise any of these rights, contact us at support@clawreel.ai. We will respond within 40 days (PDPO) or 30 days (GDPR) of receiving your verified request.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children under 18.

If we discover that we have inadvertently collected data from a child under 18, we will take steps to delete that information promptly. If you believe we have collected data from a child, please contact us at support@clawreel.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or other factors.

Material changes will be notified via email or in-app notice at least 14 days before they take effect. Your continued use of the Service after the updated policy becomes effective constitutes your acceptance of the changes.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights:

Company: AIGenesis Labs Limited
Email: support@clawreel.ai
Website: https://clawreel.ai
Privacy inquiries and data subject requests: support@clawreel.ai