Last updated: April 5, 2026
This Privacy Policy explains how Dennis Rolea ("we", "us", "our"), operating as Clawshift, collects, uses, and protects your personal data when you use our website (clawshift.ai) and services. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and German data protection law (BDSG).
In short: Your data stays in Europe, is encrypted, never sold, and never used to train AI models. You have full control over your data at all times.
Dennis Rolea
Weil am Rhein, Germany
Email: [email protected]
USt-IdNr: DE437806810
When you create an account, we collect:
During onboarding, we collect your responses to personalize your agent:
Payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, CVC, or full card details. We receive from Stripe:
When you use your AI agent, your conversations are processed by third-party AI model providers (see Section 6). We store:
We automatically collect:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the Service (agent hosting, conversations) | Art. 6(1)(b) — Contract performance |
| Processing payments | Art. 6(1)(b) — Contract performance |
| Sending transactional emails (welcome, receipts) | Art. 6(1)(b) — Contract performance |
| Security monitoring and abuse prevention | Art. 6(1)(f) — Legitimate interest |
| Improving the Service | Art. 6(1)(f) — Legitimate interest |
| Marketing emails (only with consent) | Art. 6(1)(a) — Consent |
| Legal compliance | Art. 6(1)(c) — Legal obligation |
All data is stored within the European Union.
Your agent conversations are processed by third-party AI model providers via API. We route requests through OpenRouter, which connects to providers including:
Important: None of these providers use paid API data for model training. Your conversations are processed for inference only and are not retained by the model providers beyond their standard API data retention policies (typically 30 days or less for abuse monitoring).
We only route to GDPR-compliant providers. We do not use providers based in jurisdictions without adequate data protection (e.g., we exclude Chinese AI providers).
We do not sell, rent, or trade your personal data. We share data only with:
| Recipient | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | US (EU data processing) |
| Resend / Amazon SES | Email delivery | EU (Ireland) |
| OpenRouter | LLM API routing | US |
| AI model providers | Processing conversations | Various (see Section 5) |
| Hetzner Online GmbH | Server hosting | Finland (EU) |
| Cloudflare, Inc. | CDN, DNS, DDoS protection | Global (EU origin) |
For US-based processors (Stripe, OpenRouter, Cloudflare), we rely on Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework as the legal basis for data transfers.
Under GDPR, you have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
We use only essential cookies required for the Service to function:
We do not use analytics cookies, advertising cookies, or tracking pixels. We do not use Google Analytics or similar tracking services.
Clawshift is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
Dennis Rolea
Weil am Rhein, Germany
Email: [email protected]
USt-IdNr: DE437806810