Privacy Policy

GetClawster (the "Service") is operated by Virix LTD, also known commercially as Virix Labs ("we", "us", or "our"). References to "Virix LTD", "Virix Labs", "Virix Labs", or "GetClawster" in this document all refer to the same legal entity responsible for this Service.

If you have any questions about this Privacy Policy, please contact us at general@virixlabs.com.

This Privacy Policy explains how Virix LTD collects, uses, shares, and protects personal information when you:

• Visit our website at https://getclawster.cloud (the "Website")
• Use the GetClawster Telegram bot (@GetClawsterBot) or any associated Telegram Mini App
• Purchase or use our hosted AI agent services (collectively, the "Service")

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of the Service.

We use the information we collect for the following purposes:

• Service delivery: To provision, operate, and maintain your dedicated agent container.
• Authentication and security: To verify your identity, prevent abuse, and protect the integrity of the Service.
• Payments and billing: To process payments, issue refunds, and manage subscriptions.
• Referral program: To track referrals and calculate commission payouts.
• Customer support: To respond to your inquiries and resolve issues.
• Service improvement: To analyze usage patterns and improve the product.
• Legal compliance: To comply with applicable laws and regulations.
• Communication: To send service-critical notices (e.g., payment receipts, expiry reminders). We do not send unsolicited marketing without your consent.

Where the General Data Protection Regulation (GDPR) or equivalent legislation applies, we process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service you have purchased (Art. 6(1)(b) GDPR).
• Legitimate interests: Security monitoring, fraud prevention, analytics, and improving the Service (Art. 6(1)(f) GDPR).
• Legal obligation: Where we are required to retain or disclose data by law (Art. 6(1)(c) GDPR).
• Consent: For optional marketing communications, where you have given explicit consent (Art. 6(1)(a) GDPR).

We do not sell your personal data. We share data only in the following circumstances:

We retain personal data for as long as necessary to provide the Service and fulfil the purposes described in this policy:

• Active accounts: Data retained for the duration of your subscription plus 90 days after cancellation.
• Payment records: Retained for 7 years to comply with financial record-keeping obligations.
• Bot tokens: Deleted within 30 days after your subscription ends or upon your explicit deletion request.
• Server logs: Retained for up to 90 days, then automatically purged.
• Referral data: Retained for 2 years after the last transaction involving the referral relationship.

We implement commercially reasonable technical and organizational measures to protect your personal data, including:

• Encryption in transit (TLS 1.2+) for all data transfers
• Encrypted storage for sensitive credentials (bot tokens)
• Access controls limiting data access to authorized personnel only
• Regular security reviews of our infrastructure
• Container isolation — each user's agent runs in a dedicated environment

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention obligations.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at general@virixlabs.com. We will respond within 30 days (or as required by applicable law).

Our Website uses minimal cookies strictly necessary for operation (e.g., session state, language preference). We do not currently use third-party advertising cookies or cross-site tracking.

We may use anonymous analytics (e.g., page views, referral sources) to understand how users discover the Service. This data is aggregated and not linked to individual identities.

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately at general@virixlabs.com and we will delete it promptly.

Virix LTD may transfer your personal data to countries outside your jurisdiction, including countries that may not provide the same level of data protection as your home country. When we transfer data internationally, we implement appropriate safeguards (e.g., Standard Contractual Clauses under GDPR) to ensure your data remains protected.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where feasible, notify you via the Telegram bot or email. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact: