Privacy Policy for OpenClaw

Last updated: March 15, 2026

This policy covers Google user data accessed through enabled OpenClaw features. It explains what data is accessed, why it is used, how credentials are handled, and how a user can revoke access or request deletion.

Who operates OpenClaw

OpenClaw is operated through the domain rwctl.us. Questions about privacy or Google account access can be sent to support@rwctl.us.

What Google data may be accessed

For the current OpenClaw deployment, the enabled Google-connected features are limited to Google Calendar and Google Contacts. OpenClaw may access calendar data needed for event lookup and scheduling, and contact data needed for contact lookup.

OpenClaw does not request Gmail, Google Drive, or Google Tasks access for the current deployment.

Why Google data is used

Google data is used only to provide the enabled OpenClaw feature that requires it. For example, calendar access is used to read or create events for scheduling workflows, and contact access is used to look up contact details when requested by the user.

Scope minimization and least privilege

OpenClaw requests only the Google API scopes needed for the features that are enabled. If a feature is not enabled, its related Google scope should not be requested.

Storage and credential handling

OAuth tokens, refresh tokens, and related configuration are stored on systems controlled by the operator of OpenClaw so authorized features can function. Depending on deployment, this may include application configuration storage, databases, backups, and operational logs with access limited to the operator and the systems required to run the service.

Sharing and subprocessors

Google user data accessed by OpenClaw is not sold and is not shared with unrelated third parties for advertising. Data may be processed by hosting, storage, backup, or operational service providers only as needed to run OpenClaw.

Retention

Tokens, retained Google data, and related logs are kept only for as long as reasonably necessary to operate enabled features, maintain backups, troubleshoot issues, and meet legal obligations.

Revocation and deletion

A user can revoke OpenClaw access at any time through Google account permissions. A user can also request deletion of stored tokens or related retained data by emailing support@rwctl.us. Requests will be handled on a reasonable-effort basis, subject to backup retention and legal or operational needs.

Related Google API disclosure

For a shorter product-specific disclosure focused on Google API data handling, see the Google API Disclosure page.

Contact

Privacy questions, revocation questions, and deletion requests can be sent to support@rwctl.us.