Privacy Policy
Last updated: February 2, 2026
MoltNow is a service operated by TUMI LABS L.L.C-FZ, a company registered in the United Arab Emirates. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, password (hashed), and name when you register
- Payment Information: Processed securely by Stripe; we do not store credit card numbers
- Configuration Data: API keys and settings you provide for your OpenClaw instance
- Support Communications: Messages you send to our support team
1.2 Information Collected Automatically
- Usage Data: Instance status, resource usage, and service interactions
- Log Data: IP address, browser type, access times, and pages viewed
- Device Information: Device type, operating system, and unique identifiers
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain our service | Contract performance |
| Process payments and subscriptions | Contract performance |
| Send service notifications | Contract performance |
| Respond to support requests | Contract performance |
| Improve our service | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Send marketing communications | Consent (opt-in) |
3. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption: All data in transit is encrypted using TLS 1.3
- Password Security: Passwords are hashed using bcrypt
- Infrastructure: VPS instances are isolated and secured via Cloudflare tunnels
- Access Control: Strict employee access policies and audit logging
Your VPS data is stored on Hetzner Cloud infrastructure in their data centers. API keys you configure are stored encrypted on your VPS instance.
4. Data Sharing
We do not sell your personal information. We may share data with:
- Service Providers: Hetzner (hosting), Cloudflare (networking), Stripe (payments)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger or acquisition
5. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Receive your data in a portable format
- Objection: Object to certain processing activities
- Withdraw Consent: Withdraw consent for marketing communications
To exercise these rights, contact us at privacy@moltnow.com.
6. Data Retention
- Account Data: Retained while your account is active, deleted within 30 days of account closure
- VPS Data: Deleted immediately upon instance termination
- Payment Records: Retained for 7 years for legal compliance
- Log Data: Retained for 90 days
7. Cookies and Tracking
We use minimal cookies necessary for service operation:
- Authentication: Session tokens to keep you logged in
- Preferences: Remember your settings
We do not use third-party tracking or advertising cookies.
8. Children's Privacy
MoltNow is not intended for children under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.
9. International Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or service notification. The "Last updated" date indicates when changes were last made.
11. Contact Us
For privacy-related questions or concerns:
TUMI LABS L.L.C-FZ
United Arab Emirates
Email: privacy@moltnow.com
You may also contact your local data protection authority if you have unresolved concerns.