QClaw Privacy Policy

Last Updated: April 2026

Welcome to QClaw! This Privacy Policy explains the when, how, and why when it comes to the processing of your personal information in connection with the QClaw agentic AI website and application (together, the “Service”), and sets out your choices and rights in relation to that information.

For the purposes of data protection laws, the data controller of your personal information in relation to the Service is Tencent Cloud International Pte. Ltd. (“we”, “us”, “our”).

What is QClaw?

QClaw is an agentic AI software that enables users to interact with integrated third-party large language models (“LLMs”) to generate responses and perform automated tasks independently (e.g. browsing the internet, managing files, writing and executing code, creating documents, sending emails and scheduling reminders, etc.).

The Service allows you to submit text, files, audio, commands, scheduled tasks, and any other documents or instructions (“Inputs”) via the QClaw application (“Application”) or integrated messaging channels, such as Telegram and WhatsApp (“Messaging Platforms”), which are forwarded to a third party LLM for inference, with the AI-generated responses and actions delivered back to you (“Outputs”).

You can also install or use our pre-installed Skills, (e.g. weather forecasts, canvas designs) and Plugins or other tools that have different capabilities and can provide more tailored and effective Outputs based on your Inputs.

For more information about QClaw, please see our FAQ.

Important: We are not responsible for the processing of your personal information by third parties. Please review their data processing policies and other related documentation for more information. Any link to a third party site or service does not mean our endorsement or approval of such site or service. For more information, please refer to Section 8 (Third-Party Websites and Links).
Warning: When providing input to QClaw, please do not disclose any of your personal information or those belonging to others. Any personal information you include in your prompts may be processed by third party providers of LLMs, Skills, Plugins, etc. and reproduced in Outputs.

Please note that this Privacy Policy only applies to the Service. If you use any other products or services, please refer to the privacy policy for that particular product or service.

If you do not agree to the processing of your personal information in the way this Privacy Policy describes, please do not provide your information when requested and stop using the Service. By using the Service you are acknowledging how we process your personal information as described in this Privacy Policy and, to the extent performance of a contract or legitimate interest cannot be relied upon in your jurisdiction to process the personal information, you consent to the processing of your personal information as described in this Privacy Policy.

If you have any questions about anything in this Privacy Policy, or want to exercise any rights you may have, our contact information can be found in Section 7 (Contact) below.

Please also see our page on “How to use QClaw safely”.

1. Children

Those under 18 years old are not permitted to use the Service for any purpose.

We do not seek nor knowingly collect personal information from children under 18 for any purpose. If you believe that we have personal information of anyone under the age of 18, or if you are the parent or guardian of the user and wish to notify us that a user is under 18 years old, please contact us as set out in Section 7 (Contact) below.

2. How We Process Your Personal Information

This section provides more detail on the types of personal information we collect from you, and why.

It also identifies the legal basis under which we process your data to the extent required by the data protection laws in your jurisdiction. To the extent the laws in your jurisdiction do not recognize the legal basis of performance of a contract or legitimate interest, you consent to the processing of your personal information for that purpose by consenting to the processing in this Privacy Policy.

Personal InformationUseLegal Basis (where applicable)
Information you provide to us (either directly or through a third party)
Login and account information, and security credential information such as your phone number, email address, username/nickname, third-party login identifiers, SMS verification codes, IP address, and user IDs. We use this information to create, authenticate, and manage your account for the Service, and operate and provide the Service to you. Necessary to perform our contract with you to provide the Service.
Inputs and Outputs: User prompts and instructions provided in your chat, coding and agentic sessions, the responses and actions generated.

If you choose to use Message Channels, we also process message relay data, such as timestamps, channel identifiers, and sender identifiers.

If you choose to integrate third-party applications, or upload any files and information, including personal information, as part of your Inputs, we will collect this information and this information may be reproduced in Outputs.
We use this information to process your Inputs and provide you with Outputs in accordance with your instructions.

We use this information to relay your messages between Messaging Channels and the Service to provide you with the Service.

We also use this information to investigate and resolve any security issues and to perform security checks to ensure there are no security risks.
Necessary to perform our contract with you to provide the Service.

It is also in our legitimate interests to safeguard your data and our systems.
Payment information: If you choose to purchase access to the Service, we will process payment information.

Our third-party payment providers (e.g. Midas) process all such related data on our behalf.
We use this information to manage billing and payments for the Service. Necessary to perform our contract with you to provide the Service.
Communication information: If you communicate with us or we provide you announcements, we process information such as your name, contact information and the content of the communication that you send. We use this information to communicate with you regarding issues you raise.

We may from time to time send you announcements when we consider it necessary to do so (for example, when we temporarily suspend access to the Service for maintenance, or security, privacy, or administrative-related communications). These are essential system and service-related announcements and you are not able to opt out of these notifications, which are not promotional in nature.
Necessary to perform our contract with you to provide the Service.
Feedback information: If you choose to provide feedback and suggestions for improvement, or ratings on an Output, through the application or on our Discord server, we will store the related conversation as part of your feedback. We use this information to resolve any issues you may face, debug and repair any problems, and to improve the Services and conduct research. We process this information with your consent.

It is also in our legitimate interests to maintain the functioning of our Services, diagnose errors, and to further improve and develop the Services.
Information generated as part of the Service
Device information: Device information such as device identifiers, types, models, operating system information, IP addresses, connection information, remote control session information, and plugin information. We use this information to:
• provide you with the Service;
• manage your account;
• provide and maintain optional services and features that improve the Service’s functionality and your experience; and
• detect and identify errors and bugs, and troubleshoot.
Necessary to perform our contract with you to provide the Service.

It is also in our legitimate interests to maintain the functioning of our Services and diagnose errors.
Configuration information: We process information about how hardware, software and network components operate and interact, such as deployment configuration data, and Messaging Channel authorization and configuration data. We use this information to maintain your configuration settings of the Service and to provide you with the Service. Necessary to perform our contract with you to provide the Service.
Diagnostic and usage information, and log information: We process information about your use of the Services, such as your dates and times of login, access, and search, IP address, runtime environment information, network and security information, deployment and error logs, application and performance metrics and codes, and integrations, and other information on how you use the Services. We use this information to:
• provide you with the Service;
• monitor the Service’s performance and quality;
• detect and identify errors and bugs, and troubleshoot; and
• improve, optimize, and develop the Service.
It is in our legitimate interest to monitor system performance, diagnose errors, and improve the product.
Billing and consumption information: We process information relating to billing, such as user ID, transaction amounts and timestamps, order numbers, credit and token balances, and purchased services and features. We use this information to manage billing and payments for the Service. Necessary to perform our contract with you to provide the Service.
Compliance records: Consent and withdrawal records, data deletion and export request records, and any other personal information required to be retained or disclosed pursuant to applicable laws, regulations, court orders, or government requests. We use this information to comply with applicable legal obligations, respond to regulatory requests, and fulfill data subject rights. We process this information to fulfill our legal obligations.
Other information we have about you: Information such as device identifiers, device information, IP address, information about use of the Service, Inputs and Output and plugin data. We use this information to ensure the security of our services, including aggregating and anonymizing the information for that purpose.

We use this information to improve our services, including aggregating and anonymizing the information for that purpose.
It is in our legitimate interest to ensure the security of our Service or our services.

It is in our legitimate interest to improve the Service or our services.

3. How We Store and Share Your Personal Information

Your personal information will be stored in servers in Singapore and the United States. We also have global support, engineering, and other teams who support the Service, including from the United States through our affiliates, and the People’s Republic of China.

We will transfer data outside of the jurisdiction in which you are based for the purposes described in this Privacy Policy. When we do so, we will take steps to ensure that your personal information is protected and we implement safeguards where required. Safeguards include standard contractual clauses, adequacy decisions where available, data processing agreements with all third-party data processors, and other contractual safeguards. You may contact us via the details in Section 7 (Contact) to see a copy of these safeguards.

We will share your personal information with third parties in the following situations:

4. The Security of Your Personal Information

We have information security and access policies regarding access to our systems and technology, and we protect personal information using appropriate technological protection measures such as encryption, hashing, role-based access controls, audit logs of data access.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will implement and maintain reasonable measures to protect your personal information, we cannot guarantee the security of the information transmitted via the internet; any transmission is at your own risk.

5. Data Retention

Most of the data processed by the Service is stored locally, either on your machine or your virtual private server, as per your setup.

To execute your instructions and provide you with the Service, we will also store relevant personal information on our own servers, as set out in the table below.

Please note that we do not keep your data for longer than is necessary to fulfill the relevant purpose described above unless we are required or permitted to do so under law.

Personal InformationRetention Policy
Login and account information, and security credential information
Device information
Stored for as long as you maintain an account with us and deleted within 3 months after, or within 30 days if you request for deletion, whichever is earlier.
Configuration information Stored for up to as long as you maintain an account with us and deleted 30 days after, or within 30 days if you request for deletion, whichever is earlier.
Diagnostic and usage data, and log information Stored for up to 6 months
Inputs and Outputs Stored for up to 1 day on our servers.
Please note this is still stored locally on your device or virtual private server.
Payment information
Billing and consumption information
Stored for up to 24 months after the termination of your account (for financial/tax compliance).
Compliance records As required by applicable law.
Communication information Until resolution of the issue that you are communicating with us about.
Feedback information Stored for up to 18 months

6. Your Rights

We offer our users the following rights in respect of your personal information (which you may have a legal right to exercise depending on where you are). Some of these only apply in certain circumstances. You can exercise some of these rights directly by accessing and updating the personal information in your account. Otherwise, please contact us using the details in Section 7 (Contact) below.

You also have the right to lodge a complaint directly with us, as well as with the relevant data protection authority in the country you live or work.

7. Contact

Please get in touch with us if you have any questions. You can reach us in the first instance at:

Email: hi@sg.qclaw.qq.com

We will endeavor to deal with your request as soon as possible. This is without prejudice to any right you may have to launch a claim with a data protection authority in the jurisdiction in which you live or work where you think we have infringed data protection laws.

8. Third-Party Websites and Links

We may provide links or access to third-party websites, services and features as part of the Service. If you follow links to sites or platforms or enable features (such as Skills or Plugins) that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Our inclusion of such links or access to such features does not, by itself, imply any endorsement of the content on such platforms, the operation of such features, or of their owners or operators.

9. Changes

If we make any changes to this Privacy Policy we will post the updated Privacy Policy here and notify you in accordance with relevant legal requirements.

10. Language

Except as otherwise prescribed by law, in the event of any discrepancy or inconsistency between the English version and local language version of this Privacy Policy, the English version shall prevail.

Global Addendum

Thank you for using our products and services! The following addendum integrates our Privacy Policy in order to provide you with more granular information about our service data practice.

Where do we store your personal information?

We have a global platform and may transfer your personal information outside the location in which you are based for the purposes described in the Privacy Policy. Your personal information can be accessed from outside of where you live by our engineering, technical, and other teams around the world, including from the United States.

Our servers for the Service are located in Singapore and the United States.

To provide the Service, the personal information we collect from you will be transferred to, remotely accessed, locally stored, and/or otherwise processed in the aforementioned jurisdictions. Where we transfer personal information across borders, we implement appropriate safeguards to protect your personal information as required under applicable data protection law, such as incorporating standard contractual clauses or taking into account adequacy assessments.

Who do we share your personal information with?

Depending on your use of our Service, your personal information may be shared with the following third parties/recipients in the jurisdictions indicated below:

Identity of the RecipientLocationPurposes of UseItems of Personal Information Provided
Tencent America LLC* United States Account management, configuration support, debugging and troubleshooting, billing inquiries support, and to support the provision of the Services Login and account information, configuration information, device information, diagnostic and usage information, and log information, billing information
Moonshot AI (Kimi)* In accordance with Moonshot AI’s privacy policy To conduct inference and provide you with Outputs based on your Inputs Input and Output
Meta Platforms, Inc.* In accordance with WhatsApp’s privacy policy Messaging channel integration — relaying messages between user and the Service Input and Output
Telegram FZ-LLC* In accordance with Telegram’s privacy policy Messaging channel integration — relaying messages between user and the Service Input and Output
Midas*
Midasbuy: High Morale Developments Limited
Midaspay: Harvest Sharp Limited, Centauri Technology Pte. Ltd., MP Centauri Technology Europe B.V.
In accordance with Midasbuy’s and Midaspay’s privacy policies Payment processing, card verification, fraud detection, and transaction settlement Payment information, billing and consumption information
Discord Inc.* In accordance with Discord’s privacy policy To resolve any issues you may face, debug and repair any problems, and to improve the Services and conduct research Feedback information on the Service’s Discord server

* indicates that the data recipients provide services to us in support of our internal operations and/or provide services that are integral to our Service.

Jurisdictional Addendum

Japan

If you are under the age of 18, you must not use the Service.

By clicking “accept”, you consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country where we have databases or affiliates and, in particular, to the jurisdictions specified in Section 3.

The categories of personal information specified in Section 3 may include “special care-required personal information” (i.e., sensitive information as detailed under applicable law), and you consent to the collection of such information.

You may request us to notify you about the purposes of use of, to disclose, to make any correction to, to discontinue the use or provision of, and/or to delete any and all of your personal information which is stored by us, to the extent provided by the Act on the Protection of Personal Information of Japan. When you wish to make such requests, please contact us as set out in Section 7 (Contact).

South Korea

Collection and Use of Personal Information

We collect your personal information for the purposes described in this Privacy Policy. Personal information that we collect from Republic of Korea is stored in and processed on our server located in Singapore.

With regards to the legal basis of processing personal information included in Section 2, the following legal provisions under the PIPA applies:

Delegation of Personal Information

For the performance of the services detailed in this Privacy Policy, we delegate the processing of your personal information to the following professional service providers:

DelegateeDescription of Delegated Services
Moonshot AIProvide LLMs to interpret Inputs and create Outputs in accordance with your request
Meta Platforms, Inc.
Telegram FZ-LLC
Provide instant messaging channels to converse with the Service in accordance with your request
Midas
(Midasbuy: High Morale Developments Limited; Midaspay: Harvest Sharp Limited, Centauri Technology Pte. Ltd., MP Centauri Technology Europe B.V.)
Provide payment function
Tencent America LLCAccount management, configuration support, debugging and troubleshooting, billing inquiries support, and to support the provision of the Services
Discord Inc.Provide Discord server where users can provide feedback on the Service

Overseas Transfer of Personal Information

We transfer personal information to delegatees overseas as follows:

Legal GroundsRecipientCountry/RegionMethod of TransferTypes of InformationPurposesRetention Period
PIPA Art. 28-8(1)(3) Tencent America LLC United States Transferred via information and communications network at the time of service use Login and account information, configuration information, device information, diagnostic and usage information, log information, billing information Account management, configuration support, debugging and troubleshooting, billing inquiries support As specified under “Data Retention”
PIPA Art. 28-8(1)(3) Moonshot AI Per AI provider’s privacy policy Transferred via information and communications network at the time of service use Input and Output Provide LLMs to interpret Inputs and create Outputs As specified under “Data Retention”
PIPA Art. 28-8(1)(3) Meta Platforms, Inc.
Telegram FZ-LLC
Per Messaging Channel’s privacy policy Transferred via information and communications network at the time of service use Input and Output Provide instant messaging channels As specified under “Data Retention”
PIPA Art. 28-8(1)(3) Midas Singapore and Germany Transferred via information and communications network at the time of service use Payment information; billing and consumption data Provide payment function As specified under “Data Retention”
PIPA Art. 28-8(1)(3) Discord Inc. Per Discord’s privacy policy Transferred via information and communications network at the time of service use Feedback information on Discord server Provide feedback on the Service As specified under “Data Retention”

You may refuse the overseas transfer of your personal information by contacting our Data Protection Department. If you refuse the overseas transfer, you may not be able to use our services for which overseas transfer is necessary.

Data Destruction

Personal information is retained in accordance with the data retention periods as detailed in section “Data Retention”. Personal information which has fulfilled the purpose for which it was collected or used, and has reached the period of time during which it was to be possessed, will be destroyed in an irreversible way. Personal information stored in electronic files will be deleted safely in an irreversible way by using technical methods, and printed information will be destroyed by shredding or incinerating such information.

The personal information detailed in section “Data Retention” are required to be retained pursuant to the following laws:

Act on the Consumer Protection in Electronic Commerce, Etc.
Article 6 of the Act on the Consumer Protection in Electronic Commerce:

Protection of Communications Secrets Act
Article 41 of the Decree of the Act, Article 15-2:

Your Rights

You may exercise rights related to the protection of personal information by requesting access to your personal information or the correction, deletion or suspension of processing of your personal information, or objecting to or requesting an explanation on an automated decision concerning your personal information, etc. pursuant to applicable laws such as PIPA. You may also exercise these rights through your legal guardian or someone who has been authorized by you. You can also withdraw your consent or demand a suspension of the personal information processing at any time.

Domestic Privacy Representative

Pursuant to Article 31-2 of the PIPA and Article 32-5 of the Act on the Promotion of the Use of the Information Network and Information Protection, the information regarding the domestic agent is as follows:

Contact

To protect your personal information and handle complaints relating to your personal information, we have appointed the following department:

Remedies for Infringement of Rights and Interests

In order to seek remedies for personal information infringement, you may file an application for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency’s Personal Information Infringement Reporting Center, etc.

United States

Residents of certain US states, such as California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, and other states to the extent they enact similar privacy laws, may have additional rights under their corresponding state laws.

For purposes of this section, “personal information” and “sensitive personal information” have the meanings given in the California Consumer Privacy Act of 2018 (“CCPA”), and respectively include the terms “personal data” and “sensitive data” as defined in the Colorado Privacy Act (“CPA”), the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”) and the Virginia Consumer Data Protection Act (“VCDPA”) and other similar laws (collectively, “US State Laws”).

Collection and Disclosure of Personal Information

Over the past 12 months, we have collected and disclosed for a business purpose the following categories of personal information, including sensitive personal information (denoted by *), from or about you or your device:

We collect and disclose your personal information, including sensitive personal information, for the following purposes:

For additional information about what each type of personal information is used for, see Section 2.

We disclose each of the categories of personal information that we collect as described in Section 3.

In the past 12 months, we have not sold or shared personal information of California residents within the meaning of “sold” and “share” in the CCPA. And we have no knowledge of any sale or sharing of personal information of users under 16 years of age.

In addition, we do not use or disclose sensitive personal information for purposes other than to perform the services reasonably expected by an average consumer who requests those services or as otherwise permitted by US State Laws.

Retention of Your Personal Information

The retention period varies among the different categories of data collected. For detailed information about the retention period for any specific category of data, see the chart in Section 5.

Rights under US State Laws

Depending on where you live, you may have some or all of the rights listed below in relation to information that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

How to Exercise Your Rights

First, you may wish to log into your account and manage your data from there. Depending on where you live, you may also exercise your rights by contacting us as specified in Section 7 (Contact). We may take steps to verify your identity before complying with your request to protect your privacy and security, and may decline your request if we are unable to verify your identity.

Depending on where you live, you may exercise these rights yourself or you may also designate an authorized agent to make these requests on your behalf. In order for us to process the request, you must provide the authorized agent with signed written permission.

In addition, if we deny your rights request, you may have the right to appeal our decision by contacting us through the methods described above. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal.

Questions

If you have questions or concerns regarding this Privacy Policy, please contact us as set out in Section 7 (Contact).