Privacy Policy
Last updated June 12, 2026
USteps AI Limited ("USteps", "we", "our" or "us"), developer of the UClaw software platform, is committed to safeguarding the privacy of our users. This Privacy Policy ("Policy") details our protocols and practices regarding the collection, utilization, disclosure, storage, and processing of personal data and application telemetry acquired when you access or use USteps' software, platform, APIs, documentation, and related tools, including the website uclaw.dev, and all related software made available by USteps to build, deploy, host, and manage software projects (collectively, the "Service").
1. Information We Collect
We collect information necessary to provide the Service, process billing, and optimize performance:
- Account Information: When you sign up via third-party providers (such as GitHub or Google), we receive your email address, name, and profile picture.
- Application & Configuration Data: We store agent configurations, system instructions, environment variables (secrets are encrypted at rest), and metadata about your applications to run the agent runtime.
- Conversation State & Execution Logs: To manage conversation history, state synchronization, and crash recovery, we store agent session states and message histories. We also log performance metadata (such as execution duration, token counts, and error statuses) to help you monitor and debug your agents.
- Billing Information: Transactions are handled by our payment processors (e.g., Stripe). We do not store full credit card numbers; we only store transaction history, current balance, and basic billing metadata.
- Usage & Telemetry: We collect basic, anonymous telemetry to monitor the health, availability, and performance of our edge runtime infrastructure.
2. Our Model Training Policy (No Training)
Important Policy
We do not use your code, prompt inputs, agent responses, or workspace files to train artificial intelligence models.
Your code and agent execution data are treated as private and are used solely to run your agents and provide the Service to you.
3. How Data is Shared and Processed
To execute your agents' reasoning steps, UClaw routes prompt inputs, history, and tool outputs to upstream artificial intelligence model providers:
- AI Model Providers: Depending on the models you configure (e.g., Anthropic, OpenAI, Google, DeepSeek), prompts and execution contexts are sent to these providers. They process data according to their respective terms and privacy policies.
- Data Retention by Providers: We configure our integrations to request zero data retention (ZDR) or opt-out of training with upstream providers wherever available.
- Subprocessors: We work with Cloudflare to host our edge servers and database systems. All third-party services are vetted to ensure they adhere to strict security and compliance standards.
4. Cookies and Tracking Technologies
We use cookies and similar technologies for essential purposes:
- Authentication: To keep you logged in to your developer console.
- Security: To protect against cross-site request forgery (CSRF) and other threats.
We do not use tracking cookies for advertising or profiling purposes. You can configure your browser to block or alert you about these cookies, but doing so will prevent you from logging in and using the developer console.
5. Data Retention and Deletion
- Active Accounts: We retain your account data and billing history for as long as your account remains active.
- Agent Logs & History: You can view, manage, and request deletion of individual agent session histories and logs through the developer dashboard or APIs.
- Account Termination: If you close your account, we will delete all associated databases, agent directories, configurations, and logs within 30 days, except where retention is required by law (such as transaction records for tax compliance).
- Deletion Requests: To request full account deletion or ask about your data, contact us at support@uclaw.dev.
6. Security
We implement industry-standard administrative, physical, and technical safeguards to protect your data. This includes:
- Encryption: Data is encrypted in transit using TLS and at rest using modern encryption standards.
- API Key Scoping: API keys are securely generated and hashed. We recommend restricting API keys to the minimal necessary permissions.
7. Changes to This Policy
We may update this Privacy Policy from time to time. If we make changes, we will notify you by updating the "Last Updated" date at the top of this document. We encourage you to review this page periodically to stay informed about our data practices.
8. Contact Us
If you have any questions or feedback regarding this Privacy Policy, please email us at: support@uclaw.dev