Privacy Policy

• Account information: Name, email address, and password when you create an account.
• Billing information: Payment details processed through our payment provider (Stripe). We do not store full credit card numbers on our servers.
• Agent configurations: OpenClaw configuration files, policy definitions, SOUL.md files, and custom skill code you upload or create through the Service.
• API keys and credentials: Third-party API keys (such as LLM provider keys, messaging platform tokens, and integration credentials) that you provide to configure your agents. These are encrypted at rest and used solely to operate your agents.
• Support communications: Messages, emails, and other communications you send to us.
• Waitlist and form submissions: Email addresses and any other information you provide when joining our waitlist or submitting forms on our website.

• Agent telemetry data: If you use the ContinuEye monitoring connector or managed hosting, we collect data about your agents' actions, including tool calls, message events, token usage, error logs, and performance metrics. This data is used to power your dashboards, alerts, and audit trails.
• Usage data: Information about how you interact with the Service, including pages viewed, features used, and actions taken within the dashboard.
• Device and connection data: IP address, browser type, operating system, device identifiers, and referring URLs.
• Log data: Server logs that record requests to our systems, including timestamps, endpoints accessed, and response codes.
• Cookies and similar technologies: We use cookies and similar technologies as described in Section 6 below.

• Config scanner data: The web-based config scanner tool runs entirely in your browser. No configuration data is transmitted to our servers when you use this tool.
• Local-mode telemetry: If you use the @continueye/agent npm package in local-only mode, all telemetry data is stored on your own disk. Nothing is sent to our servers.
• LLM prompts and responses: We do not intercept, store, or have access to the content of prompts sent to or responses received from third-party LLM providers (such as Anthropic, OpenAI, or Google). Those communications occur directly between your agent and the LLM provider.

We share information with third-party service providers who assist us in operating the Service:

These providers are contractually obligated to use your data only to provide services to us and in accordance with this Privacy Policy.

If you use the Service through a white-label or reseller partner, both you and the reseller may have access to certain account and agent data as configured by the reseller. The reseller is responsible for their own privacy practices regarding your data.

If you are a reseller, you are responsible for providing appropriate privacy disclosures to your end clients regarding data processed through the Service.

We may disclose your information if required to do so by law, court order, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

If ContinuEye is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

We may share your information with third parties when you give us explicit consent to do so.

Activity logs, audit trails, and monitoring data are retained according to your subscription plan:

After the retention period expires, telemetry and log data is automatically deleted.

If you close your account, we will delete your personal information and agent data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).

We retain billing and transaction records for a minimum of 7 years as required by applicable tax and financial regulations.

We may retain anonymized, aggregated data that cannot be used to identify you for an indefinite period for analytics, benchmarking, and service improvement purposes.

• Essential cookies: Required for the Service to function, including authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our website and Service. We use privacy-focused analytics that do not track users across websites.
• Preference cookies: Remember your settings and preferences (such as dark mode, dashboard layout).

• We do not use third-party advertising cookies.
• We do not use cross-site tracking pixels.
• We do not participate in ad networks or retargeting programs.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

You may request a copy of the personal information we hold about you. Agent configurations, policy files, and audit logs can be exported through the Service dashboard at any time.

You may update your account information through the Service dashboard or by contacting us.

You may request deletion of your personal information by contacting us at privacy@continueye.com. We will process your request within 30 days, subject to any legal retention obligations.

You may unsubscribe from marketing emails by clicking the unsubscribe link in any email or by contacting us. You cannot opt out of transactional communications related to your account (such as billing receipts and security alerts).

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), you may object to certain processing of your personal data or request that we restrict processing under certain circumstances.

We process your personal data under the following legal bases:

• Contract performance: To provide the Service you have subscribed to.
• Legitimate interests: To improve the Service, ensure security, and prevent fraud.
• Consent: Where you have provided explicit consent (such as for marketing communications).
• Legal obligation: To comply with applicable laws and regulations.

ContinuEye is the data controller for personal data collected through the Service. For agent telemetry data that includes personal data of your end users or clients, you are the data controller and ContinuEye acts as a data processor on your behalf.

For GDPR-related inquiries, contact us at privacy@continueye.com.

You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your personal data violates the GDPR.