Privacy Policy¶

Last updated: 17 June 2026

StockClaw AI ("StockClaw", "we", "us", or "our") provides a multi-agent market intelligence service that helps users monitor public financial news, organise watchlists, receive alerts, and ask AI-assisted questions about market signals. This Privacy Policy explains how we collect, use, disclose, protect, retain, and delete information when you use StockClaw through our website, progressive web app, Android app, documentation site, APIs, notifications, and related services.

This policy is intended to satisfy the privacy-policy disclosure requirements for the StockClaw AI service, including the StockClaw AI Android app package co.stockclaw.app distributed through Google Play.

StockClaw is an information and research tool. It does not provide financial, investment, legal, tax, or professional advice. Market signals, summaries, scores, and AI-generated responses are provided for informational purposes only.

Who We Are¶

The service is operated by the StockClaw team led by Dr Kaitao Lai.

Privacy contact: privacy@stockclaw.co

Support and account deletion contact: support@stockclaw.co

Primary service URLs:

https://stockclaw.co
https://docs.stockclaw.co

Scope¶

This Privacy Policy applies to:

the StockClaw AI web app and PWA at stockclaw.co
the StockClaw AI Android app / Trusted Web Activity wrapper
Telegram and browser push notification integrations
Claw Chat and other AI-assisted features
account, watchlist, settings, alerting, and support workflows
the public documentation site at docs.stockclaw.co

It does not apply to third-party websites, data sources, identity providers, app stores, or services that we do not control, even if they are linked from StockClaw.

Information We Collect¶

Account And Identity Information¶

When you create or access a StockClaw account, we may collect:

email address
display name
profile image URL, if supplied by your sign-in provider
authentication provider identifiers
StockClaw user ID
sign-in method, such as Google OAuth or email magic link
session and security metadata required to keep you signed in

Authentication is handled through Supabase and supported identity providers. We do not receive your Google account password.

Watchlist, Alert, And Settings Data¶

To provide the product, we collect information you choose to enter or configure, including:

ticker symbols, company names, and watchlist entries
alert rules, notification preferences, quiet hours, language preferences, and display settings
Telegram chat ID and optional Telegram username if you link Telegram
browser push subscription endpoint and push encryption keys if you enable browser notifications
account deletion confirmation data, such as the email address you type to confirm deletion

Chat, Query, And Product Interaction Data¶

When you use Claw Chat or other AI-assisted features, we may collect:

prompts, questions, and messages you submit
AI-generated responses shown to you
referenced signal IDs, retrieved context, and retrieval metadata
latency, error, and quality metrics
conversation identifiers needed to show your own chat history

We use this information to provide the chat feature, improve retrieval quality, debug failures, and maintain service integrity.

Market Signal And Derived Data¶

StockClaw processes public financial news and market information. In connection with your account, we may store:

generated market signals matched to your watchlist
summaries, scores, agent reasoning, tickers, timestamps, and source URLs
embeddings or search indexes used for semantic retrieval
notification delivery state for relevant signals

The underlying news and market sources are public or third-party licensed sources. Your watchlist determines which generated signals are associated with your account.

Device, Log, And Technical Data¶

When you use StockClaw, we may collect technical data such as:

IP address
user agent, browser, operating system, and device type
requested URLs, timestamps, and response status codes
app version, build metadata, and referrer information
crash, diagnostic, performance, and abuse-prevention logs
rate-limit, authentication, and security event metadata

For the Android app, the app primarily opens the StockClaw PWA in a Trusted Web Activity. The app may expose standard Android app metadata to Google Play, Android, Chrome, and Google Play services as part of normal installation, update, security, notification, and web-app launch flows.

Local Storage, Cookies, And Similar Technologies¶

StockClaw may use:

authentication/session storage needed to keep you signed in
browser localStorage for user interface state such as pinned, read, or cached dashboard state
service worker caches for PWA installation, offline shell loading, and performance
security or infrastructure cookies set by hosting, authentication, or platform providers

We do not currently use third-party advertising cookies in the StockClaw app.

Support And Communications¶

If you contact us, we may collect:

your email address and message content
support request details
related account identifiers needed to investigate the issue
metadata generated by the support or contact channel you use

Information We Do Not Intentionally Collect¶

StockClaw does not intentionally collect:

payment card numbers
government identification numbers
precise GPS location
contacts, call logs, SMS, photos, camera, microphone, or biometric data
health data
data from unrelated apps installed on your device
passwords for third-party accounts

If future features require additional sensitive permissions or data types, we will update this policy and provide any required in-app disclosures and consent flows before collection.

How We Use Information¶

We use information to:

create, authenticate, secure, and administer accounts
maintain watchlists and user settings
ingest public market information and match it to your watchlist
generate market signals, summaries, scores, and AI-assisted answers
deliver dashboard updates, Telegram notifications, and browser push notifications
provide Claw Chat and retrieval-augmented responses
debug, monitor, protect, and improve the service
enforce rate limits, prevent abuse, investigate security events, and protect users
respond to user requests, support messages, and account deletion requests
comply with legal obligations and enforce our terms
prepare aggregate, de-identified operational metrics

We do not sell personal information. We do not use your personal data for third-party advertising. We do not publish your private watchlist, settings, chat history, or account information.

AI Processing¶

StockClaw uses AI models and related infrastructure to summarise public news, score market impact, and answer user questions. Depending on the production configuration, prompts and context may be processed by model providers or model gateways such as DeepSeek or OpenRouter.

AI requests may include:

public article text or metadata
ticker symbols and market context relevant to the requested analysis
your prompt or chat message
retrieved signal context associated with your account
operational metadata required to route and monitor the request

We do not intentionally send unnecessary account profile data to model providers. We do not ask model providers to train foundation models on your private StockClaw account data. Model-provider retention, security, and abuse-monitoring practices may be governed by their own terms and privacy policies.

We share information only as needed to operate, secure, and improve StockClaw, or where required by law.

Service Providers¶

We may share information with service providers that process data for us, including:

Supabase for authentication, database, storage, and realtime infrastructure
hosting and deployment providers such as Railway, Vercel, GitHub Pages, Cloudflare DNS, or similar infrastructure providers
AI model providers or gateways such as DeepSeek or OpenRouter
Telegram Bot API if you link Telegram notifications
browser and operating-system push services, such as Google, Apple, Mozilla, or other push-service operators, if you enable browser push
email and support tools used to send sign-in links, service notices, or respond to requests
security, logging, monitoring, and abuse-prevention tools

These providers may process data in countries other than your own.

If you connect Telegram, we send selected signal summaries to the Telegram chat you configure. If you enable browser notifications, we send notification payloads through the relevant browser push service. You can disconnect these integrations from settings or through your browser/device controls.

Legal, Safety, And Business Transfers¶

We may disclose information if we reasonably believe it is necessary to:

comply with law, legal process, or enforceable governmental requests
protect the rights, safety, and security of users, StockClaw, or the public
investigate fraud, abuse, or security incidents
enforce our terms or policies
support a merger, acquisition, financing, reorganisation, or transfer of assets, subject to appropriate confidentiality and notice where required

Data Security¶

We use reasonable technical and organisational safeguards designed to protect personal information, including:

HTTPS encryption in transit
authentication and session controls
database access controls and row-level security where applicable
separation of user-scoped data by user ID
restricted operational access
secrets kept outside the repository
logging and monitoring for security and reliability
backups and operational safeguards appropriate for the service

No online service can guarantee absolute security. You are responsible for protecting access to your email account, Google account, Telegram account, device, and browser session.

Data Retention¶

We retain information for as long as needed to provide StockClaw, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

Typical retention periods are:

account, watchlist, alert, settings, Telegram, and push subscription data: until you delete it or delete your account
chat history and query logs: until deleted through product controls where available or through account deletion
generated user-associated signals and retrieval data: until account deletion or until no longer operationally required
server and security logs: typically up to 30 days, unless longer retention is required for security, debugging, legal, or abuse-prevention reasons
support correspondence: as long as needed to resolve the request and maintain appropriate records
aggregate or de-identified metrics: may be retained without identifying you

Backups may retain deleted information for a limited period until overwritten through normal backup cycles.

Account Deletion And Data Deletion¶

If you can create an account in StockClaw, you can request account deletion. You may initiate deletion from within the app where the feature is available, or outside the app by emailing:

support@stockclaw.co

Please include the email address associated with your account. We may ask you to verify control of the account before deletion.

When your account is deleted, we delete or de-identify user-scoped data associated with the account, including watchlists, settings, notification subscriptions, Telegram linkage, chat history, and user-associated retrieval data, unless retention is required for legal, security, fraud-prevention, dispute-resolution, or compliance reasons. We aim to complete account deletion within 30 days after verification.

Deleting the StockClaw Android app from your device does not automatically delete your StockClaw account or server-side data.

Your Choices And Rights¶

Depending on where you live, you may have rights to:

access personal information we hold about you
correct inaccurate personal information
delete personal information
object to or restrict certain processing
receive a portable copy of certain data
withdraw consent where processing is based on consent
complain to a privacy or data protection regulator

You can exercise these rights by contacting privacy@stockclaw.co. We may need to verify your identity before responding.

You can also control many settings directly:

edit or remove watchlist entries in the app
update notification preferences in settings
disconnect Telegram integration
disable browser push through StockClaw settings or your browser/device controls
sign out of StockClaw

International Data Transfers¶

StockClaw and its service providers may process information in Australia, the United States, the European Economic Area, Singapore, or other countries where infrastructure or providers operate. Those countries may have data protection laws different from those in your location. Where required, we rely on appropriate legal mechanisms and provider commitments for international transfers.

Children¶

StockClaw is not directed to children under 13 and is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to StockClaw, contact us at privacy@stockclaw.co and we will take appropriate steps to delete it.

Region-Specific Notices¶

Australia¶

If the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles apply, this policy explains how we manage personal information openly and transparently. You may contact us at privacy@stockclaw.co to request access or correction, or to make a privacy complaint. We will respond within a reasonable period.

European Economic Area And United Kingdom¶

Where GDPR or UK GDPR applies, our legal bases may include:

performance of a contract to provide StockClaw
legitimate interests in operating, securing, debugging, and improving the service
consent for optional notifications or integrations where required
compliance with legal obligations

You may have the right to lodge a complaint with your local supervisory authority.

California And Other U.S. States¶

We do not sell personal information or share it for cross-context behavioural advertising. Depending on your state, you may have rights to know, access, correct, delete, or receive information about certain data practices. Contact privacy@stockclaw.co to exercise applicable rights.

Google Play Data Safety¶

The StockClaw Android app is a Trusted Web Activity wrapper for the StockClaw PWA. Data collection and sharing for the Android app should be understood consistently with this policy and the Google Play Data safety form submitted for package co.stockclaw.app.

The app may collect or process account information, app activity, app information and performance, device or other identifiers, and user-generated content when those data types are involved in the StockClaw web service. Data may be encrypted in transit. Users can request account and associated data deletion as described above.

Changes To This Policy¶

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide notice through the app, documentation site, email, Telegram, or another reasonable channel.

Your continued use of StockClaw after an updated policy becomes effective means you acknowledge the updated policy.

Contact¶

For privacy questions, rights requests, or complaints:

privacy@stockclaw.co

For account deletion and support: