1. Introduction
Banalabs ("we", "our", or "us") operates the website lobsterlair.xyz and provides the LobsterLair managed OpenClaw hosting service (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name (optional)
- Payment information (processed by Stripe)
2.2 Service Configuration
When you use LobsterLair, we collect and process:
- AI provider API keys (encrypted with AES-256-GCM)
- Telegram bot tokens (encrypted)
- Telegram User IDs for access control
- Custom system prompts and bot configuration
2.3 Bot Data
Your OpenClaw instance stores:
- Conversation memory (MEMORY.md file)
- Workspace files created by your bot
- Configuration files
2.4 Usage Data
We automatically collect:
- IP address and browser information
- Container logs (for troubleshooting)
- Service usage metrics
3. How We Use Your Information
- Providing and maintaining the LobsterLair service
- Processing payments and managing subscriptions
- Running your OpenClaw bot instance
- Providing technical support and troubleshooting
- Improving and developing new features
- Complying with legal obligations
- Detecting and preventing fraud or abuse
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- AI Providers: Your API key is used to communicate with your chosen AI provider (MiniMax, Moonshot, Anthropic, OpenAI). We do not share any other data with them.
- Telegram: Your bot token is used to connect to Telegram's Bot API.
- Stripe: Payment processing is handled by Stripe. See Stripe's Privacy Policy.
- Legal Requirements: We may disclose your information if required by law.
5. Data Retention
- Active subscriptions: Data is retained while your subscription is active.
- After cancellation: Data is retained for 30 days, then deleted.
- Bot memory: You can clear your bot's memory at any time from the dashboard.
- Data export: You can download all your data at any time.
6. Data Security
We implement appropriate security measures:
- API keys encrypted with AES-256-GCM
- Encryption in transit (TLS/SSL)
- Isolated Docker containers per user
- Strict resource limits and network isolation
- Regular security reviews of OpenClaw updates
7. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request a copy of your data (use "Download My Data" in dashboard).
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Request your data in a machine-readable format.
- Right to Object: Object to certain types of processing.
To exercise these rights, contact us at hello@lobsterlair.xyz. We will respond within 30 days.
8. Third-Party Services
Our Services integrate with:
- OpenClaw: Open-source AI agent framework (openclaw.ai)
- Telegram: Messaging platform for bot interactions
- AI Providers: MiniMax, Moonshot, Anthropic, OpenAI
- Stripe: Payment processing
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and posting a notice on our website.
10. Contact Us
If you have questions about this Privacy Policy, please contact us:
Email: hello@lobsterlair.xyz