Legal
Last updated: April 4, 2026
FiveClaw ("we", "us", or "our") operates the FiveClaw platform, including the website at fiveclaw.com, the fiveclaw-agent open-source CLI, fivem-mcp, and ai-fivem-dev-mcp. This policy explains what information we collect, how we use it, and your rights.
When you create a FiveClaw account we collect your email address and a hashed password. We never store your password in plaintext.
Subscription payments are processed by Stripe. FiveClaw stores only a Stripe customer ID and subscription status — we do not store or have access to your full card number, CVV, or bank details.
We generate and securely store API keys that authenticate your AI client to the cloud MCP services. Keys are hashed at rest; the full key is only shown once at creation time.
We collect anonymous, aggregated metrics — which MCP tools are called and how often. This data is used to improve service reliability and plan roadmap features. We do not collect or store the content of your Lua files, SQL queries, or resource code.
The fiveclaw-agent runs entirely on your own machine. File reads, MySQL queries, txAdmin commands, and context memory stay local. The agent connects outbound through a Cloudflare Tunnel solely to relay tool-call responses to your AI client — your source code is never uploaded to FiveClaw servers.
When you use ai-fivem-dev-mcp (Pro / Enterprise), resource code snippets are temporarily transmitted to our servers for analysis (security scanning, test generation, anti-pattern detection, etc.). This data is processed in memory and is not persisted beyond the duration of the tool call.
Our servers automatically record standard HTTP logs (IP address, browser/client type, pages visited, timestamps) for security monitoring and debugging. These logs are retained for up to 30 days.
We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising.
We share data only in the following limited circumstances:
Account data is retained for the lifetime of your account. If you delete your account, we will purge your personal data within 30 days, except where retention is required by law (e.g., billing records, which are kept for 7 years in many jurisdictions). Aggregated, anonymized usage statistics are kept indefinitely.
We use industry-standard security measures including TLS encryption in transit, hashed credentials at rest, Cloudflare Tunnel for agent connections, and principle-of-least-privilege access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you discover a security vulnerability, please disclose it responsibly to [email protected].
FiveClaw uses strictly necessary cookies and browser local storage for session authentication (JWT tokens) and dashboard preferences. We do not use third-party tracking cookies or advertising pixels. You can clear cookies at any time through your browser settings, which will sign you out of your session.
Depending on your location you may have the following rights regarding your personal data:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
FiveClaw is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
FiveClaw is operated from the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. We rely on Standard Contractual Clauses and other lawful transfer mechanisms where required by applicable law (e.g., GDPR).
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date above. Continued use of FiveClaw after such changes constitutes acceptance of the revised policy.
Questions about this Privacy Policy? Reach us at:
[email protected]