Privacy Policy

SuperClawman began as one person's personal automation system and has grown into a product offering. This policy covers the whole of it: what the website sees, what payments involve, what the assistants touch, and what they never see.

01Who operates this

SuperClawman is built and run by Paulo Ovídio on his own machines and accounts, offered commercially through SUPERCLAWMAN LLC, a Florida limited liability company. The data controller for what is described here is that business; contact details are at the end.

02This website

superclawman.ai is a set of static pages. It runs no analytics, no advertising, no tracking pixels and no third-party scripts of that kind. It sets no cookies of its own and builds no visitor profiles. The site loads web fonts from Google Fonts and images from GitHub Pages; those providers see the requesting IP address as a normal consequence of serving a file. Standard server logs may be retained by the hosting provider (Cloudflare Pages) for security and reliability.

03Payments

Card payments are processed by Stripe. Your card number goes to Stripe and never to us; we receive only what Stripe reports about the transaction (name, email, amount, status). Stripe handles that data under its own privacy policy as an independent controller. Billing records are kept as long as tax and accounting rules require.

04The assistants

SuperClawman for Meetings joins calls only when you invite it. It processes audio while in the call and afterwards stores the brief and follow-ups in your own workspace; call audio is not kept beyond producing them. WhatsApp Memory runs on your machine against your own history; your messages never reach our systems. Founding-seat holders' contact details (name, email, WhatsApp handle where given) are used only to run the service and talk to you about it — never sold, never used for unrelated marketing without a separate opt-in.

05eBay integration

SuperClawman connects to the eBay API to help list personal used items on the operator's own eBay account. It is a private seller account, not a storefront; the application does not offer sign-in to other eBay members and collects no one's eBay credentials. When someone buys an item, eBay supplies the buyer's name and delivery address so the order can be shipped; that is used only to fulfil and support the order, kept only as long as shipping, returns, tax and accounting need, never used for marketing, and disclosed to no one beyond the carrier and authorities where law requires.

06Instagram business accounts

Businesses can connect their Instagram professional account to a SuperClawman agent through Instagram's own business login. When they do, we receive through Meta's APIs: the account's user ID and username; the IDs and captions of its own posts; the Direct messages sent to the account and the comments on its posts (the sender's Instagram-scoped ID, username, text and time); and the replies the agent sends. We use this only to answer those messages and comments on the business's behalf and to show the business what was answered. We do not sell it, use it for advertising, or use it to train AI models. It is processed by our hosting providers (Hetzner, Cloudflare), by the AI model provider that writes the replies (Anthropic) and, for messages to our own @superclawman account, by Telegram, where our team reviews drafted replies. Messages and comments are kept for at most 12 months, then deleted. A business can disconnect at any time in Instagram (Settings → Website permissions → Apps and websites → Superclawman Intelligence), which stops all access at once.

Deleting your data. To delete the data we hold from your Instagram account, or from your conversation with a business that uses SuperClawman, email [email protected] with your Instagram username and the words "Delete my data". We delete it within 30 days and confirm by email.

07Dropbox

A customer can connect their own Dropbox account to their SuperClawman agent. They approve it on Dropbox's own screen, where our app appears as Superclawman Agentes, and the agent never sees their Dropbox password. Access is read-only: the agent can list, search and download, and it cannot write, change or delete anything in Dropbox. Once connected, the agent receives through Dropbox's API the account's name and email, the names, paths, sizes and dates of the files and folders that account can see, including folders other people share with it, and the content of the files it downloads.

We use this only to do what the customer asks of their own agent, such as finding a file and sending it to them. We do not sell it, use it for advertising, or use it to train AI models. The access token and the downloaded copies stay on the server that runs that customer's agent, with restricted permissions, and what the agent reads can also stay in its conversation history and memory there. It is processed by our hosting providers (Hetzner, Cloudflare), by Anthropic under the customer's own Claude account and its terms, and by WhatsApp when a file is sent to the customer there. Our team can reach that server to run and support the service.

A customer can disconnect at any time by asking the agent, or in Dropbox (Settings → Apps → Superclawman Agentes → Disconnect), which stops all access at once. Copies and history already on that server stay until the customer asks us to delete them at the address below. We delete them within 30 days and confirm by email, and the server's backups age out within 30 days after that.

08Your rights

You may ask what we hold about you, have it corrected, or have it deleted when it is no longer needed — including the rights of access, rectification, erasure, portability and objection under the EU GDPR and, for residents of Brazil, the LGPD (Lei Geral de Proteção de Dados). Email the address below and it will be handled within the deadlines those laws set. OAuth tokens used by integrations are stored permission-restricted on operator-controlled machines, excluded from version control, and can be revoked by you at the provider at any time (for eBay: My eBay → Account settings → Sign in and security → Third-party app access).

09Changes and contact

If this policy changes, the new version is published here with a new date. Questions, access requests or deletion requests: [email protected]. Purchases are covered by our refund policy and our terms of service.