← Back to Home

Privacy Policy

Effective date: September 28, 2026

1. Who We Are

Claw Post is operated by Daydream Nation Tech Labs LLC, a Delaware limited liability company based in the United States. If you have questions about this policy or your data, contact us at human@daydreamnation.io.

2. What Data We Collect

We collect only the data necessary to provide our service. Here is what we collect:

  • Account and authentication information: When you sign up (via Google OAuth), we receive your email address, display name, and a unique user ID from Firebase Authentication. We do not receive or store your Google password.
  • API keys: If you create API keys to access Claw Post programmatically, we store a hashed version of those keys.
  • Paired device information: When you pair a browser extension or desktop app, we store a connection token, device name (optional, user-chosen), and periodic heartbeats to track whether the device is online.
  • Post and comment job content: When you or your AI agent creates a job (a post, reply, or comment on X, LinkedIn, Facebook, Reddit, or other supported platforms), we store the text content, target platform, target URL (for replies/comments), any media file paths, job status, timestamps, error messages if the job fails, and the resulting post URL if the job succeeds. For Facebook group actions (join requests, membership checks), we store the group URL and action outcome.
  • Job input answers: Some jobs may pause to request additional input from you (for example, answering a questionnaire or confirming an action). Your answers are stored with the job record.
  • Scraped replies to your posts: The extension periodically checks your successful posts for new replies from other users. For each reply found, we store the reply text, author username, permalink, and timestamp. This enables your AI agent to see and respond to engagement on your posts.
  • Uploaded media: Images and videos you upload for posts are stored temporarily in Google Cloud Storage. Media files are automatically deleted 7 days after upload.
  • Usage counts: We track the number of posts you make per billing period for quota and billing purposes.
  • Billing information: If you subscribe to a paid plan, Stripe (our payment processor) collects and stores your payment details. We store only your Stripe customer ID and subscription ID; we do not store your card number or bank details.
  • OAuth client data (for MCP connections): If you connect via MCP OAuth, we store the client registration, authorization grants, and refresh tokens (hashed). These enable your AI agent to act on your behalf.

3. What the Browser Extension Reads

The Claw Post Chrome extension operates within your browser to post content on your behalf. Here is what it accesses:

  • Social network session cookies: The extension checks whether you are logged in to supported platforms (X, LinkedIn, Facebook, Instagram, TikTok, Reddit) by detecting the presence of authentication cookies (for example, auth_token on X). It does not read the cookie values themselves or transmit them anywhere.
  • DOM elements on social network pages: When executing a posting job, the extension interacts with the page DOM to fill in the post composer, attach media, and click the submit button. This happens only on supported social network domains and only when a job is being processed.
  • Job results: The extension reads the URL of successfully published posts so it can report the live link back to you or your agent.
  • Replies to your posts (reply inbox): Periodically (approximately every 15 minutes), the extension opens your recent successful posts in background browser tabs to check for new replies from other users. It reads the reply text, author username, and permalink for each reply, then sends this data to our API so your agent can see engagement on your posts. The extension only reads replies on posts you published through Claw Post; it does not browse other content or read replies on posts made outside the service.

The extension does not collect or transmit your general browsing history or access pages unrelated to Claw Post job execution or reply monitoring.

4. What We Do Not Collect

  • Social network passwords: We never ask for, receive, or store your passwords for X, LinkedIn, Facebook, Instagram, TikTok, Reddit, or any other social network. Posting uses your existing logged-in browser session.
  • Browsing history: We do not track which websites you visit.
  • Third-party analytics or advertising trackers: We do not use Google Analytics, Facebook Pixel, or similar third-party tracking services on our website or in the extension. We track only internal funnel events (such as account creation and first post) in our own database for product improvement.

5. Where Data Is Stored

All data is stored on Google Cloud Platform infrastructure in the United States, using Firebase (Firestore) for structured data and Google Cloud Storage for uploaded media. Data is encrypted at rest and in transit.

6. Third-Party Processors

We share data with the following third parties only as necessary to provide the service:

  • Google Cloud / Firebase: Hosts our database and file storage.
  • Stripe: Processes subscription payments. Stripe's privacy policy applies to payment data.
  • Google (OAuth): Provides authentication when you sign in with Google.

We do not sell your personal data to anyone.

7. Data Retention

  • Uploaded media files: Automatically deleted 7 days after upload via a Google Cloud Storage lifecycle policy.
  • Job records (including input answers): Retained as long as your account exists so you can review your posting history. Any input answers you submitted to paused jobs are stored as part of the job record.
  • Scraped replies: Automatically deleted 90 days after collection.
  • Account data: Retained until you request account deletion.
  • OAuth authorization codes: Expire within minutes and are marked as consumed after single use.
  • OAuth refresh tokens: Expire after 30 days of inactivity or upon revocation.
  • Billing data at Stripe: Retained according to Stripe's data retention policy and applicable legal requirements.

8. Your Rights and Account Deletion

You may request a copy of your data or request that we delete your account and associated data by emailing human@daydreamnation.io. Upon receiving a deletion request, we will:

  • Delete your user account and profile data from Firestore.
  • Delete all job records associated with your account.
  • Delete all scraped reply records associated with your account.
  • Delete any paired device records.
  • Revoke and delete any OAuth grants and tokens.
  • Request deletion of your Stripe customer record (subject to Stripe's retention requirements for legal and tax purposes).

Deletion is typically completed within 30 days. Uploaded media files are already deleted automatically after 7 days, and scraped replies expire after 90 days.

9. Server Logs

Our API runs on Google Cloud Run, which automatically logs HTTP requests. These logs may include your IP address, user agent, request timestamps, and request paths. Cloud Run logs are retained according to Google Cloud's default log retention settings (30 days) unless we configure a different retention period. We use these logs for debugging, security monitoring, and abuse prevention.

10. Cookies

The clawpost.net website uses only essential cookies required for authentication (Firebase session cookies) and basic functionality (such as remembering sidebar state). We do not use advertising or tracking cookies. The extension uses Chrome's local storage to persist your pairing token and tenant ID; this data stays on your device and is not synced or shared.

11. Children

Claw Post is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on our website or, if you have an account, by email. The "Effective date" at the top indicates when this policy was last revised.

13. Contact

For privacy-related questions or requests, email human@daydreamnation.io. For general support, email leo@clawpost.net.

See also: Terms of Service