Privacy Policy

Last updated: August 17, 2026

1. Introduction

Monzed Labs OU ("Company", "we", "us", or "our") operates the Clawder platform ("Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI app builder, integrated marketplace, and all associated services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA).

By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Services.

2. Information We Collect

We collect information necessary to provide and improve the Services:

  • Account Information: Email address, full name, and authentication credentials collected during registration. If you sign in via a third-party provider (e.g., Google), we receive your name, email, and profile image from that provider.
  • Billing Information: Payment card details are processed by Stripe, Inc. and are never stored on our servers. We retain transaction records (amount, date, status) for financial reporting.
  • Workspace Data: Text prompts, generated code, file structures, and conversational history created while using the AI app builder. This data is stored in your account and associated with your projects.
  • Marketplace Data: If you publish or purchase apps on the marketplace, we store listing details (title, description, images, pricing), transaction records, and payout information (PayPal email or bank details for sellers).
  • Usage Telemetry: System diagnostics, credit consumption logs, feature interaction metrics, and error reports used for platform stability, security, and improvement.
  • Cookies and Similar Technologies: We use essential cookies to maintain your session and preferences. We do not use third-party advertising or tracking cookies.

3. How We Use Your Information

We use collected information for the following purposes:

  • Providing, maintaining, and improving the Services, including AI code generation and marketplace functionality.
  • Processing transactions, managing subscriptions, and handling payouts to marketplace sellers.
  • Communicating with you about account activity, service updates, and support requests.
  • Detecting and preventing fraud, abuse, and security incidents.
  • Complying with legal obligations and enforcing our Terms of Service.
  • Aggregating anonymized usage data to understand platform trends and improve the Services.

4. AI Subprocessors

To power the AI app builder, your prompts and workspace data are transmitted to third-party AI providers (OpenAI, Anthropic, Google). These providers are contractually obligated not to use your data for training or fine-tuning their models. Data is processed in accordance with each provider's API terms and privacy policy.

We do not control how these third parties handle data after processing. We encourage you to review the privacy policies of OpenAI, Anthropic, and Google for further details.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

  • Service Providers: We share data with trusted third-party providers who assist in operating the Services (e.g., Stripe for payments, Supabase for database, Resend for emails, E2B for sandbox environments, Vercel for hosting). These providers are bound by contractual obligations to protect your data.
  • Legal Requirements: We may disclose information if required by law, court order, or governmental request, or to protect the rights, property, or safety of the Company, our users, or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the receiving entity honoring this Privacy Policy.
  • With Your Consent: We may share information for purposes not described here only with your explicit consent.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. Specifically:

  • Account Data: Retained until you request account deletion, after which it is purged within 30 days (except where retention is required by law).
  • Workspace Data: Projects and generated code are retained as long as your account exists. You may delete individual projects at any time.
  • Transaction Records: Financial records are retained for 7 years as required by Estonian and EU tax and accounting regulations.
  • Usage Logs: Anonymized telemetry may be retained indefinitely for analytics purposes.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest, isolated sandbox environments for code execution, role-based access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request correction of inaccurate or incomplete data.
  • Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
  • Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
  • Right to Object: You may object to processing of your data for certain purposes, including direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

9. International Data Transfers

Your data may be processed in countries outside the EEA, including the United States, where some of our service providers operate. We ensure that appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission where required.

10. Marketplace-Specific Data

If you use the marketplace as a buyer or seller, additional data handling applies:

  • Sellers: Your public author profile (name, avatar, listed apps) is visible to marketplace visitors. Your PayPal email and bank details are visible only to the platform administrator for payout processing.
  • Buyers: Your purchase history is visible only to you and the platform administrator. Sellers do not receive your email address or payment details.
  • Listings: Published app listings, including descriptions, images, and pricing, are publicly visible on the marketplace.

11. Children's Privacy

The Services are not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. We encourage you to review this page periodically. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or to exercise your data rights, contact our Data Protection Officer at [email protected] or write to:

Monzed Labs OU
Ahtri tn 12, Kesklinna linnaosa
Tallinn, Harju maakond, 15551
Estonia

If you are not satisfied with our response, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at https://www.aki.ee.