← Back to Ghost Claw

Privacy Policy

Last updated: April 30, 2026

Overview

Ghost Claw ("the App") is a desktop application that runs locally on your Windows computer. Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights.

What Data Stays on Your Computer

Ghost Claw runs locally. The following data is stored only on your machine and never sent to us:

• Conversation history and chat messages
• RAG memory (semantic memory database)
• Notes, tasks, reminders, and bookmarks
• Clipboard history
• Expense logs and password vault entries
• User profile and preferences
• Activity tracking data
• WhatsApp session credentials
• All configuration and API keys you enter

What Data is Sent to Third Parties

Ghost Claw connects to AI providers (such as OpenAI, Anthropic, Google, etc.) that you choose and configure. When you chat with the AI:

• Your messages are sent to the AI provider you selected
• The AI provider's privacy policy applies to that data
• We do not proxy, store, or intercept these communications
• You provide your own API keys — we never see them

Web search queries (via Brave Search) are sent to the search provider when you use the search feature.

If you connect a Google account for Gmail send and Google Calendar features, see the Google API Services disclosure below for the full details on scopes, data flow, storage, and revocation.

Google API Services — User Data Disclosure

This section is provided in compliance with the Google API Services User Data Policy and the Google APIs Terms of Service. It supersedes any conflicting language elsewhere in this document for matters involving Google user data.

A. Data Accessed

Ghost Claw requests the following Google OAuth scopes only when you explicitly choose to connect your Google account inside the app. No Google data is accessed without user-initiated authorization.

• openid + email — used solely to identify the connected Google account by email address so you can verify which account is in use. Displayed in the app's settings panel.
• https://www.googleapis.com/auth/gmail.send — permits the app to send outbound email on your behalf via the Gmail API. This scope does not permit reading the inbox.
• https://www.googleapis.com/auth/calendar.readonly — permits the app to read your primary and shared calendars so the assistant can answer questions about your schedule.
• https://www.googleapis.com/auth/calendar.events — permits the app to create, modify, or delete calendar events when you explicitly request it.

Ghost Claw does not request gmail.readonly or gmail.modify. Inbox reading, when you enable it, is performed via IMAP using credentials you supply separately, not via the Gmail API.

B. Data Usage

Google user data is used solely to fulfill the specific in-session request you make:

• Calendar events are read into a transient, in-memory prompt so the chosen AI model can answer questions about your schedule.
• Email send requests are composed by the assistant from your instruction and dispatched via Google's Gmail API.
• The Google account email address is displayed only in the app's settings UI to confirm which account is connected.

Ghost Claw does not use Google user data for advertising, analytics, profiling, AI model training, or any purpose other than fulfilling your direct, in-session request.

C. Data Sharing

Ghost Claw does not transmit Google user data to any server operated by Ghost Claw — no such server exists. Google user data leaves your device only in two situations, both initiated by you:

• AI inference. When you invoke a feature that requires a language model, the relevant data (e.g., calendar event titles for a "summarize my week" query) is sent directly from your device to the AI provider you have selected and configured in settings (OpenAI, Anthropic, Google Gemini, Groq, OpenRouter, NVIDIA NIM, a self-hosted endpoint, or local Ollama). You select the provider; Ghost Claw simply forwards the request. Each provider's privacy policy governs further use.
• Google APIs. Outbound email is delivered through Google's own Gmail API; calendar reads and writes go through Google's Calendar API. No intermediary server is involved.

Google user data is not shared with any other third party, is not sold, and is not used in any advertising network.

D. Data Storage & Protection

All Google user data is held on your local Windows device:

• OAuth refresh and access tokens are stored in %APPDATA%\com.ghostclaw.app.v5\, with file-system permissions inherited from your Windows user account.
• Calendar events and email metadata are held only in transient in-memory state during the immediate conversation; they are not written to disk as a persistent Google-data cache.
• No Google user data is transmitted to or stored on any Ghost-Claw-operated infrastructure.

All API calls to Google use HTTPS/TLS encryption in transit, as required by Google's endpoints.

E. Data Retention & Deletion

Because no Google user data is stored on infrastructure operated by Ghost Claw, retention is governed entirely by your local installation:

• Disconnect from inside the app: Settings → Email/Calendar → Disconnect. This removes the OAuth tokens from local storage.
• Revoke from your Google account: visit myaccount.google.com/permissions, locate "Ghost Claw", and click Remove Access.
• Uninstall the app: removes the entire local data directory at %APPDATA%\com.ghostclaw.app.v5\, including all stored tokens.

You may take any of the above actions at any time. There is no server-side data to delete because none is collected.

What We Collect

When you purchase Ghost Claw through our website:

• Email address — to deliver your license key and provide support
• Payment information — processed by DodoPayments (our payment provider, acting as Merchant of Record). We never see your card details.
• License activation records — DodoPayments stores which device IDs are bound to your license key (up to 5 active activations) so the app can verify your license on each device.

We do not collect:

• Usage analytics or telemetry from the desktop app
• Your conversations or AI interactions
• Your files, screenshots, or clipboard data
• Any data from WhatsApp, email, or calendar integrations

License Verification

When you first activate your license key, Ghost Claw contacts DodoPayments to register your device (one of 5 activation slots). Once per day on app launch, Ghost Claw sends your license key and device ID to DodoPayments to confirm the license is still valid (e.g. has not been refunded). The app works offline for up to 10 consecutive days between revalidations to handle travel and ISP outages.

No conversation content, AI responses, files, or telemetry are sent to DodoPayments — only the license key and device fingerprint required for activation and revalidation.

Cookies

Our website uses no tracking cookies. DodoPayments (payment provider) may set cookies during checkout — refer to their privacy policy.

Data Security

All data stored by Ghost Claw on your computer is in standard formats (JSON, SQLite). It is not encrypted at rest — it is protected by your Windows user account permissions. We recommend using Windows disk encryption (BitLocker) for additional protection.

Children's Privacy

Ghost Claw is not directed at children under 13. We do not knowingly collect data from children.

Your Rights

You can:

• Delete all Ghost Claw data by removing the %APPDATA%\com.ghostclaw.app.v5\ folder
• Request deletion of your purchase records by contacting us
• Uninstall the app at any time — no data is retained elsewhere

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For privacy questions or data deletion requests:
GhostClaw.team@gmail.com