Privacy Policy - iSetupClaw

1

Who We Are

iSetupClaw is a service operated by BEST DEVHUB SRL (hereinafter referred to as "Company," "we," "us," or "our"), a company registered in Romania.

Company Name

BEST DEVHUB SRL

Website

isetupclaw.com

Contact Email

hello@isetupclaw.com

Data Controller

BEST DEVHUB SRL is the data controller responsible for your personal data collected through isetupclaw.com and related services.

This Privacy Policy applies to all personal information collected through our website, email communications, remote service sessions, payment processes, and any other interactions you have with iSetupClaw.

2

Information We Collect

We collect different types of information depending on how you interact with our services:

2.1 Information You Provide Directly

When you contact us, purchase a service, or engage with our team, you may voluntarily provide:

Identity Information: Full name, business name, job title.
Contact Information: Email address, phone number, WhatsApp number, mailing address.
Payment Information: Billing name, billing address, and payment method details. Note: Credit card numbers and sensitive payment data are processed directly by our third-party payment processor and are never stored on our servers.
Business Information: Number of claw machines, machine models, location addresses, current revenue data, operational details, and business goals.
Communication Content: Messages, emails, chat transcripts, and any files or images you share with us during support or setup sessions.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

Device Information: Browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution.
Usage Data: Pages visited, time spent on pages, click patterns, scroll depth, referring website, exit pages.
Network Information: IP address, approximate geographic location (country/city level), internet service provider.
Cookies & Identifiers: Cookie IDs, session tokens, and similar tracking identifiers (see Section 8 for details).

2.3 Information from Third Parties

We may receive limited information from third-party services:

Payment Processors: Transaction confirmation, payment status, billing country (not full card details).
Analytics Providers: Aggregated and anonymized website usage statistics.

ℹ️ Sensitive Data

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, or biometric data. If you inadvertently share such information with us, we will delete it promptly upon discovery.

3

How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

To process your purchase and set up your OpenClaw deployment.
To schedule and conduct remote setup and configuration sessions.
To provide technical support and troubleshooting assistance.
To monitor and optimize OpenClaw performance on your behalf (hosted plans).
To deliver reports, alerts, and performance data to you.

3.2 Communication

To respond to your inquiries, support requests, and feedback.
To send service-related notifications (e.g., deployment confirmation, system updates, maintenance notices).
To send occasional product updates or tips (you can opt out at any time).

3.3 Payment Processing

To process one-time payments for our services.
To issue refunds when applicable.
To generate invoices and maintain financial records as required by law.

3.4 Improvement & Analytics

To analyze website traffic and usage patterns to improve our site and services.
To identify and fix technical issues or bugs.
To understand which services and content are most valuable to our clients.

3.5 Legal & Compliance

To comply with applicable laws, regulations, and legal processes.
To protect our rights, property, and safety, and that of our clients and the public.
To enforce our Terms of Service.
To detect and prevent fraud or other illegal activities.

4

Legal Basis for Processing (GDPR)

As BEST DEVHUB SRL is established in Romania (a member of the European Union), we process personal data in compliance with the General Data Protection Regulation (GDPR). Our legal bases for processing include:

📝 Contractual Necessity

Processing necessary to fulfill our contractual obligations to you — including service delivery, payment processing, and support. This applies when you purchase a plan or engage our services.

✅ Consent

Where you have given explicit consent for a specific purpose — such as subscribing to our newsletter or opting into marketing communications. You may withdraw consent at any time.

⚖️ Legitimate Interest

Processing necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes website analytics, service improvement, fraud prevention, and direct marketing to existing clients.

📋 Legal Obligation

Processing required to comply with applicable laws — including tax regulations, accounting requirements, and responding to lawful requests from authorities.

5

Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party providers who process data on our behalf to deliver our services:

Payment Processors: To securely process your payments (e.g., Paddle, LemonSqueezy, or similar). These processors are PCI-DSS compliant and have their own privacy policies.
Hosting Providers: Cloud infrastructure providers that host our servers and the hosted OpenClaw instances.
Communication Tools: Email service providers (for transactional and support emails), video conferencing platforms (for remote sessions).
Analytics: Website analytics services (e.g., Google Analytics) that collect anonymized and aggregated usage data.

🔒 Data Processing Agreements

All third-party service providers we work with are bound by Data Processing Agreements (DPAs) that require them to protect your data and process it only according to our instructions, in compliance with GDPR and other applicable regulations.

5.2 Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to:

Comply with a legal obligation, court order, or regulatory request.
Protect and defend the rights or property of BEST DEVHUB SRL.
Prevent or investigate possible wrongdoing in connection with our services.
Protect the personal safety of our users or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

6

Data Storage & Security

6.1 Where We Store Your Data

Your personal data may be stored and processed in:

European Union: Where our company (BEST DEVHUB SRL) is established.
United States: Where some of our cloud infrastructure and service providers are located.
Other jurisdictions: Where our third-party service providers operate data centers.

When data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (see Section 10).

6.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption: All data transmitted between your browser and our website is encrypted using TLS/SSL (HTTPS). Data at rest is encrypted using industry-standard AES-256 encryption.
Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis. We use multi-factor authentication for all administrative accounts.
Infrastructure Security: Our hosting providers maintain SOC 2, ISO 27001, and/or equivalent security certifications. Regular security audits and vulnerability assessments are performed.
Monitoring: We employ continuous monitoring for unauthorized access attempts and security incidents.
Backups: Regular encrypted backups are maintained to prevent data loss.

⚠️ No System is 100% Secure

While we take extensive measures to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security. If you become aware of any security breach, please contact us immediately at hello@isetupclaw.com.

7

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

Account & Service Data

Retained for the duration of our business relationship plus 3 years after your last interaction with us, unless you request earlier deletion.

Payment & Transaction Records

Retained for a minimum of 7 years as required by Romanian and EU tax and accounting regulations.

Communication Records

Support emails and chat transcripts are retained for 2 years after the last communication, then automatically deleted.

Website Analytics Data

Anonymized analytics data is retained for up to 26 months. IP addresses are anonymized within 24 hours of collection.

Marketing Consent Records

Records of your consent (or withdrawal of consent) for marketing communications are retained for 5 years for compliance documentation purposes.

When data is no longer needed, it is securely deleted or anonymized so that it can no longer be associated with you.

8

Cookies & Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function properly, remember your preferences, and provide usage information to site operators.

8.2 Cookies We Use

🟢 Strictly Necessary Cookies

Essential for the website to function. These include session cookies and security tokens. Cannot be disabled. Duration: Session or up to 24 hours.

🟡 Functional Cookies

Remember your preferences (e.g., language, region) to enhance your experience. Duration: Up to 1 year.

🔵 Analytics Cookies

Help us understand how visitors use our website by collecting anonymized data (pages viewed, time on site, traffic sources). We use Google Analytics with IP anonymization enabled. Duration: Up to 26 months.

🟣 Marketing Cookies

Used to track visitors across websites to display relevant ads. We currently do not use marketing or advertising cookies. If this changes, we will update this policy and request your consent.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

View what cookies are stored and delete them individually.
Block third-party cookies.
Block cookies from specific websites.
Block all cookies.
Delete all cookies when you close your browser.

Please note that blocking certain cookies may affect the functionality of our website. For more information on managing cookies, visit allaboutcookies.org.

9

Your Rights

Under the GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

📋 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

✏️ Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

🗑️ Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data, subject to certain legal exceptions (e.g., data required for tax compliance).

⏸️ Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances (e.g., while we verify the accuracy of disputed data).

📦 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

🚫 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we demonstrate compelling legitimate grounds.

🤖 Right Regarding Automated Decisions

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. If we implement such systems, we will provide clear information and the ability to request human review.

↩️ Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: hello@isetupclaw.com
Subject Line: "Privacy Rights Request — [Your Name]"

We will respond to your request within 30 days of receipt. In some cases, we may need to verify your identity before processing your request. If your request is complex or involves a large volume of data, we may extend the response period by an additional 60 days, in which case we will notify you.

Right to Lodge a Complaint

If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with your local supervisory authority. In Romania, this is:

🏛️ Supervisory Authority

ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal)
Website: www.dataprotection.ro
We encourage you to contact us first so we can try to resolve your concerns directly.

10

International Data Transfers

As a company operating globally, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

10.1 Safeguards for International Transfers

When we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place, including:

Adequacy Decisions: Transfers to countries that the European Commission has determined provide adequate data protection (e.g., the EU-US Data Privacy Framework).
Standard Contractual Clauses (SCCs): EU-approved contractual terms that require the data recipient to protect data to EU standards.
Data Processing Agreements: Binding agreements with all service providers that include GDPR-compliant data protection obligations.

10.2 Your Rights Regarding Transfers

You may request information about the specific safeguards applied to the transfer of your data outside the EEA by contacting us at hello@isetupclaw.com.

11

Children s Privacy

Our services are designed for business operators and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal data from a person under 18, we will take immediate steps to delete that information. If you believe a child has provided us with personal data, please contact us at hello@isetupclaw.com.

12

Third-Party Links & Services

Our website may contain links to third-party websites, services, or platforms (e.g., payment processors, social media, external resources). Please note:

We are not responsible for the privacy practices or content of third-party websites.
Each third-party service has its own privacy policy that governs how they collect and use your data.
We encourage you to review the privacy policy of any third-party service before providing personal information.

The inclusion of a link on our website does not imply endorsement of the linked site or its privacy practices.

13

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

The "Last Updated" date at the top of this page will be revised.
Material changes will be communicated via email to all clients with active service agreements, at least 14 days before the changes take effect.
A summary of changes will be provided with each update notification.
Continued use of our services after the effective date constitutes acceptance of the updated policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data. Previous versions of this policy are available upon request.

14

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us:

🔒 Privacy Inquiries

We take data protection seriously and aim to respond within 48 hours on business days.

📧 hello@isetupclaw.com

BEST DEVHUB SRL
Operating as: iSetupClaw
Website: isetupclaw.com
Email: hello@isetupclaw.com

💚 Our Commitment

At BEST DEVHUB SRL, we believe privacy is a fundamental right. We are committed to being transparent about our data practices, minimizing the data we collect, and giving you control over your personal information. If you ever feel that your privacy is not being respected, we want to hear from you.