Legal

Privacy Policy

Draft version:

This Privacy Policy explains what information The Zoop Troop, Inc. (“BlueClaw”, “we”, or “us”) collects when you use the BlueClaw website, customer portal, and API (together, the “Service”), how we use and share it, and the choices you have. It is part of the Terms of Service.

1. Information We Collect

  • Account information: your name and email address, email verification records, and the version of the Terms you accepted and when.
  • Sign-in and security records: one-time login codes and session tokens, which we store only as one-way hashes, and a one-way hash of your IP address used for abuse prevention and rate limiting. We do not store your IP address in readable form.
  • API keys: stored as one-way hashes. We keep a short prefix and the name you give a key so you can recognize it; we cannot show you a full key again after it is created.
  • Billing information: purchases are processed by Stripe. We receive and keep your Stripe customer ID, email, purchase amounts, and your credit balance and ledger. We never receive or store your full card number.
  • Usage records: for each request, the model and endpoint, time, token or other usage counts, charge, response status and error codes, and which operator or provider served it.

Your content. You are solely responsible for prompts, inputs, files, outputs, and other content you submit or direct the Service to process. BlueClaw does not store the prompts, files, or outputs of API requests; it passes them to the worker nodes that serve the request and returns the response. BlueClaw does not use your content to train models.

2. How We Use Information

We use the information above to provide and route requests, authenticate you, calculate and collect charges, enforce limits and our Terms, prevent fraud and abuse, keep the Service secure and reliable, respond to support requests, send service email such as login codes and account notices, and meet legal obligations. We do not sell your personal information, share it for cross-context behavioral advertising, or use it for advertising.

3. Who Receives Information

  • Worker-node operators and vendors receive the content of your requests in order to serve them (see section 4).
  • Service providers that work for us: Stripe for payments, an email delivery provider for login codes and service email, a bot-check provider at sign-in, and the hosting and network providers that run the Service.
  • Legal and safety: authorities or other parties when we believe disclosure is required by law, or necessary to protect the rights, safety, or property of BlueClaw, our users, or others, including reporting illegal content.
  • Business transfers: a buyer or successor in a merger, acquisition, financing, or sale of assets, subject to this policy.

4. Worker Nodes and Vendors

Your requests and submitted content go to a decentralized set of worker nodes run by independent operators, who can see and may log what's sent. A request to a vendor-marked model also reaches that vendor, named on the model. The vendor today is Alibaba Cloud. BlueClaw does not own, operate, or control those parties. Their own terms of service and privacy policies govern their processing, and you should review those policies before selecting or using a model. The portal shows which models are vendor-marked and links to that vendor's policies where available.

5. No Sensitive Data or Confidentiality Guarantees

You warrant that you will not submit personal health information, payment-card data, government identifiers, regulated data, secrets, or other sensitive or confidential data. BlueClaw does not guarantee confidentiality, end-to-end encryption, trusted execution, confidential computing, or any operator's or provider's deletion or retention practices. Operators and providers may log or retain content or metadata under their own policies, including in other countries.

6. Cookies and Browser Storage

The Service does not use advertising or analytics cookies or third-party trackers. The website and portal use your browser's local and session storage to keep you signed in, remember your theme, and hold playground settings and conversations in your browser. You can clear this storage at any time in your browser settings; you will then need to sign in again.

7. How Records Are Kept, and for How Long

The permanent log. Billing and usage facts are kept in a permanent log tied only to an account ID. We add entries and never rewrite them. No entry holds your name, email address, IP address, prompts, responses, API keys, or login codes.

Your identity. Your name, email address, and Stripe customer ID are in a separate record. Deleting an account deletes the identity: that record and any notes we wrote about the account are deleted, and its API keys are revoked. Entries in the permanent log stay, and they keep only the ID.

What the ID can still link to. Purchase entries also hold Stripe's references for each payment, and Stripe keeps its own records under its own policy. An account ID with those references may still count as personal data in some places, even after the identity is deleted.

Proposed retention periods, not yet decided. We may keep information longer where the law requires it.
InformationProposed period
Login codes15 minutes, or until used
Browser sessions24 hours after sign-in, or until you sign out
Hashed IP addresses and rate-limit counters30 days
Name, email address, and Stripe customer IDUntil the account is deleted, then within 30 days
Notes behind top-ups and adjustmentsDeleted with the name and email address
Billing and usage logPermanent, with months older than 13 moved to archive storage
Queued service email30 days
Support email2 years after the last message
Server and application logs30 days
Backups35 days, and a deletion is applied again after any restore

8. Security

We protect information with measures such as encrypted connections, one-way hashing of keys, codes, sessions, and IP addresses, encryption of stored secrets, and restricted access to production systems. No system is perfectly secure, and we cannot guarantee the security of information transmitted to or through the Service.

9. Your Choices and Rights

You can view and update your account details and revoke API keys in the portal. You may ask us to access, correct, export, or delete your personal information by emailing info@blueclaw.network. We will verify your request and respond within the time the law requires. We may keep information we must retain for legal, tax, billing, or security reasons, including the permanent log in section 7, and deleting your account forfeits any credit as described in the Terms. Depending on where you live, you may have additional rights under laws such as the GDPR or the California Consumer Privacy Act, including the right to object or to complain to a data-protection authority; we will not discriminate against you for exercising them.

10. International Processing

BlueClaw is based in the United States and processes information there. Operators and providers that serve your requests may be located in, and process content in, other countries. By using the Service you understand that your information may be processed outside your country, where privacy laws may differ.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

12. Service Basis and Liability

The Service and its outputs are provided as described in the Terms of Service, including its sections on as-is service, availability, model changes, limitation of liability, and indemnification, which also apply to this policy.

13. Acceptance, Versions, and Material Changes

At signup, you accept this Privacy Policy and the Terms of Service through a required clickwrap checkbox. After a material change, we will require clickwrap acceptance again before continued account use. Any use of the API constitutes acceptance of the current published version of the Terms and this policy, whether or not you use the web interface. The draft version of this policy is .

14. Contact

Questions about this policy or your information: info@blueclaw.network. Legal notices: The Zoop Troop, Inc., info@blueclaw.network.