GDPR compliance overview
OneClickClaw is based in the European Union (Greece). Every customer server, and the data stored on it, is hosted in the EU (Denmark). We collect only the minimum data necessary to provide the service, and you keep control over your personal data at all times. The subprocessors that receive data, some of them outside the EU, are listed below and in the Privacy Policy.
Note
Every server, and the data stored on it, is hosted in the EU (Denmark) from the first day it runs.
Controller vs. processor
Under GDPR, roles are clearly defined:
- You are the data controller for your end users' data. If people interact with your AI agent, you determine the purpose and means of processing their data (messages, conversations, etc.).
- OneClickClaw is the data processor. We process personal data only on your behalf and only to the extent needed to provide the hosting service (account management, billing, server provisioning).
This distinction means you are responsible for informing your end users about how their data is handled when they interact with your AI agent. We provide the infrastructure; you control the data processing decisions.
Your rights under GDPR
As a OneClickClaw user, you have the following rights regarding your personal data:
- Right of access: You can see your account details and your servers in your dashboard at any time. For a full copy of the personal data we hold, email info@oneclickclaw.io.
- Right to rectification: You can update your account information through your dashboard settings or by contacting support.
- Right to erasure: You can delete your account yourself in Settings, under Danger Zone: press Delete Account and type
delete my accountto confirm. Your servers are destroyed, your account record is deleted, and billing records are kept only as long as tax law requires. - Right to data portability: Email info@oneclickclaw.io for an export of your account data. Files on your server can be copied off over SSH on a paid plan.
- Right to restriction: You can request that we limit processing of your data while a complaint is being resolved.
Option 1: Dashboard
Option 2: Email
Option 3: Support Ticket
How to exercise your rights
You can exercise any of these rights through two channels:
- Email: Contact info@oneclickclaw.io with your request. Include your account email so we can verify your identity. We respond to all requests within 30 days, as required by the GDPR.
- Dashboard: Viewing your account, updating it, and deleting your account are available directly from your dashboard settings without needing to contact us.
Tip
If you are not satisfied with our response to a data request, you have the right to lodge a complaint with your local data protection authority.
Subprocessors
OneClickClaw uses a limited number of trusted subprocessors to deliver the service. This list matches the Privacy Policy:
| Subprocessor | Purpose | Location | Data Safeguards |
|---|---|---|---|
| Webdock | VPS infrastructure, platform hosting, production database | Denmark (EU) | EU-based, GDPR applies |
| Stripe | Payment processing | USA | EU Standard Contractual Clauses (SCCs), PCI DSS Level 1 |
| Authentication (sign in with Google): email, name, photo | USA | SCCs, EU Data Boundary | |
| Anthropic | AI chatbot, support agent, content generation (chat messages, ticket content and images, server diagnostics excerpts with keys masked) | USA | SCCs, zero-retention API policy |
| Google (Gemini API) | Support knowledge search: the text of your support ticket | USA | SCCs |
| Telegram | Team alerts about support tickets and platform events: your email, the ticket subject and a short excerpt | UAE, global infrastructure | Internal team channel only |
| Slack | Team alerts: your email, the ticket subject and a short excerpt | USA | SCCs |
| Resend | Transactional email and newsletter delivery | USA | SCCs |
| Cloudflare | Bot protection (Turnstile) | USA (global CDN) | SCCs, ISO 27001 |
| Porkbun | Domain registration and DNS for customer subdomains | USA | ICANN accredited |
| OpenAI (ChatGPT Ads) | Measuring which of our ChatGPT ads led to a trial or a subscription, only for visitors who arrived from an ad and opted in to analytics | USA | Opt-in only, no name, email or IP address sent |
Note
We do not sell your data. The subprocessors above, and the full Privacy Policy, describe who receives it and why.
For a detailed breakdown of what data we collect and store, see Data & Privacy.