Legal
Privacy Policy
Last updated: July 19, 2026
FiveClaw ("we", "us", or "our") operates the FiveClaw platform, including the website at fiveclaw.com, the open-source fiveclaw-agent that runs on your machine, the read-only cloud documentation service (fivem-mcp), and the hosted Codespace development environment. This policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
Account Information
When you create a FiveClaw account we collect your email address and a hashed password. We never store your password in plaintext.
Billing Information
Subscription payments are processed by Stripe. FiveClaw stores only a Stripe customer ID and subscription status — we do not store or have access to your full card number, CVV, or bank details.
API Keys
We generate and securely store API keys that authenticate your AI client to the cloud documentation service and to the agent running on your Codespace. Keys are hashed at rest; the full key is only shown once at creation time.
Usage Data
We collect anonymous, aggregated metrics — which MCP tools are called and how often. This data is used to improve service reliability and plan roadmap features. We do not collect or store the content of your Lua files, SQL queries, or resource code.
Local Agent — fiveclaw-agent
The fiveclaw-agent runs entirely on your own machine. All code analysis — security scanning, anti-pattern detection, validation, dependency and flow analysis — happens locally, in-process. File reads, MySQL queries, txAdmin commands, and context memory stay on your machine. Your source code is never sent to FiveClaw.
Cloud Documentation Service
The cloud service (fivem-mcp) is read-only — it returns public reference data such as native functions, framework documentation, and code snippets. It does not receive your resource code, SQL, or files. Requests carry only the search term or reference you look up.
Hosted Codespace
If you provision a Codespace (a paid feature), the FiveM server you build on it — your resource files, database, and configuration — runs on a virtual server we provision for you on a third-party cloud provider (DigitalOcean). You supply an SSH public key so you can connect; we store only the public key and never your private key. If you enable backups, a snapshot of your Codespace is stored under your account in our object storage (Cloudflare R2). Your Codespace and its contents belong to you — see Data Retention for how long we keep them and how deletion works.
Log Data
Our servers automatically record standard HTTP logs (IP address, browser/client type, pages visited, timestamps) for security monitoring and debugging. These logs are retained for up to 30 days.
2. How We Use Your Information
- Provision and operate your FiveClaw subscription and API keys.
- Process payments and send billing receipts via Stripe.
- Send transactional emails — account creation, password reset, subscription changes.
- Improve the reliability, performance, and features of our MCP tools using aggregated usage data.
- Detect and prevent abuse, fraud, and violations of these policies.
- Respond to your support requests.
- Comply with applicable law.
We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising.
3. Data Sharing
We share data only in the following limited circumstances:
- Stripe — payment processing. Governed by Stripe's own privacy policy.
- DigitalOcean — hosts your Codespace virtual server (only if you provision one). Under a data processing agreement.
- Cloudflare — DDoS protection, agent tunnel, and Codespace backup storage (R2). Encrypted in transit; Cloudflare does not retain agent message content.
- Legal requirements — if compelled by law, court order, or to protect the rights, property, or safety of FiveClaw or our users.
4. Data Retention
Account data is retained for the lifetime of your account. If you delete your account, we will purge your personal data within 30 days, except where retention is required by law (e.g., billing records, which are kept for 7 years in many jurisdictions). Aggregated, anonymized usage statistics are kept indefinitely.
Codespaces: your Codespace and its data exist while your subscription is active. When you cancel, or after a grace period following a failed payment (currently 72 hours), the Codespace and its contents are permanently deleted. Please back up anything you want to keep before your subscription ends. Backups you saved to your account are deleted with your account.
5. Security
We use industry-standard security measures including TLS encryption in transit, hashed credentials at rest, Cloudflare Tunnel for agent connections, and principle-of-least-privilege access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you discover a security vulnerability, please disclose it responsibly to [email protected].
6. Cookies & Local Storage
FiveClaw uses strictly necessary cookies and browser local storage for session authentication (JWT tokens) and dashboard preferences. We do not use third-party tracking cookies or advertising pixels. You can clear cookies at any time through your browser settings, which will sign you out of your session.
7. Your Rights
Depending on your location you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and associated personal data.
- Portability — receive your data in a machine-readable format.
- Objection / Restriction — object to or restrict certain processing activities.
- Withdraw consent — where processing is based on consent, you may withdraw at any time.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Children's Privacy
FiveClaw is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
9. International Transfers
FiveClaw is operated from the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. We rely on Standard Contractual Clauses and other lawful transfer mechanisms where required by applicable law (e.g., GDPR).
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date above. Continued use of FiveClaw after such changes constitutes acceptance of the revised policy.
11. Contact
Questions about this Privacy Policy? Reach us at:
[email protected]