GhostClaw privacy notice.
This notice explains what GhostClaw processes, why it processes it, and what stays on your device.
Who is responsible.
GhostClaw is an unincorporated project operated from the United Kingdom. GhostClaw is the controller for the processing described here.
Contact GhostClaw at ghostclaw@protonmail.com.
What the system processes.
The website host can process your IP address, browser details, requested page, time, and security logs. The site code sets no cookies and uses no analytics.
When you submit the landing-page form, GhostClaw and Basin process your email address and anti-spam form data.
If you receive access, GhostClaw can process your email address, invitation identifier, access status, and legal acceptance record.
Hosted services can process your IP address, public wallet address, public account identifier, request data, payment identifier, proof, signature, and settlement result.
The report service processes the public wallet address you request, public blockchain records, report status, and generated report.
GhostClaw processes the contact details and message content that you send when you request support.
GhostClaw can obtain transaction data from public blockchain networks and public blockchain data providers.
GhostClaw does not require you to send your wallet private key or private payment witness to its hosted services.
Why GhostClaw processes data.
GhostClaw processes access and service data to provide the private alpha. The lawful basis is contract or steps requested before a contract.
GhostClaw processes network and security data to prevent abuse, enforce limits, diagnose faults, and protect the service. The lawful basis is legitimate interests.
GhostClaw processes support messages to answer requests and resolve faults. The lawful basis is contract or legitimate interests.
GhostClaw can process records when applicable law requires it. The lawful basis is legal obligation.
The legitimate interests are service security, fraud prevention, fault diagnosis, and responsible alpha operation.
Where data can go.
GhostClaw uses service providers to host and operate the website and alpha. Relevant providers currently include Vercel, Basin, Upstash, Alchemy, and Blockscout.
- Vercel hosts the current GhostClaw service and can process request and security data.
- Basin receives waitlist email addresses and form security data.
- Upstash stores service state, rate-limit records, and hosted report records.
- Alchemy provides blockchain infrastructure and can receive public account and transaction request data.
- Blockscout can receive a public wallet address when the report service requests public transaction data.
- Public blockchain networks receive data required for public verification and settlement.
- Your selected AI provider can receive information that your agent sends through its own service.
- A resource server receives the request data that your agent sends to that server.
Some providers can process data outside the United Kingdom. GhostClaw relies on the provider's applicable transfer safeguards.
GhostClaw does not sell personal data.
How long data remains.
GhostClaw keeps hosted report requests and generated reports for no more than 30 days.
GhostClaw keeps waitlist records until access administration no longer requires them or you ask GhostClaw to erase them.
The current hosted rate limiter keeps short protected identifiers for its active rate-limit window.
GhostClaw keeps access and acceptance records while access remains active. It can keep necessary records longer for legal claims or legal duties.
GhostClaw keeps support records only while they are needed to resolve the request and manage related legal obligations.
Infrastructure providers keep operational and security logs under their own retention settings.
Public blockchain records are permanent. GhostClaw cannot erase records controlled by a public network.
What stays with you.
The local GhostClaw software stores encrypted wallet state, payment policy, payment records, configuration, and proving files on your device.
- The operating-system credential store can hold the key that protects local GhostClaw state.
- Connected agent configuration can contain the local command and approved service settings.
- The browser prototype can store Miden account state and a settlement journal in browser storage.
- Local data remains until you remove it, clear the browser data, or remove the related configuration.
Local storage is not the same as GhostClaw receiving that data. Other software on your device can have its own access rights.
Your data rights.
UK data-protection law can give you rights over personal data controlled by GhostClaw.
- Ask for a copy of your personal data.
- Ask GhostClaw to correct inaccurate personal data.
- Ask GhostClaw to erase personal data when the law applies.
- Ask GhostClaw to restrict processing when the law applies.
- Ask for portable data when the law applies.
- Withdraw consent when consent is the lawful basis.
You can object to processing based on legitimate interests. GhostClaw will stop unless a lawful reason permits continued processing.
GhostClaw does not make solely automated decisions that have legal or similarly significant effects on you.
Questions and complaints.
Send a privacy request to ghostclaw@protonmail.com. Include enough information for GhostClaw to identify the relevant record.
You can also complain to the UK Information Commissioner's Office. See ICO complaint guidance.
CHANGES TO THIS NOTICE
GhostClaw can update this notice when the service or law changes. The page will show the new effective date and version.