Who we are
OpenClawBundles operates a marketplace for products built on the OpenClaw ecosystem — skills, personas, team configs, vertical bundles, heartbeat recipes and workspace templates. The service is available at openclawbundles.com.
What we collect
- Account data: email, username, display name and optional avatar/bio when you sign up.
- OAuth data: if you sign in with GitHub or Google, we receive the provider id, email and basic profile they return.
- Payment metadata: Stripe processes every card. We never receive card numbers. We keep the order metadata (product, amount, timestamp, purchase id) so we can deliver the bundle and issue invoices.
- Uploads (creators only): the ZIP file and metadata you submit when publishing a bundle.
- Product analytics: pages visited and events like
purchase_completedorreview_submitted. Only captured when analytics are enabled (off by default).
Why we collect it
- Run your account and authenticate sessions.
- Process your purchases and send bundles to your library.
- Pay creators their 75% share via Stripe Connect.
- Send transactional emails (purchase receipts, sale notifications, security scans).
- Improve the product via aggregated analytics — never on identified individuals.
Subprocessors
We use third parties that handle data on our behalf under a data-processing agreement:
- Supabase (EU, Ireland) — Postgres database, Auth, file Storage.
- Stripe (USA/EU) — payments and creator payouts.
- Brevo (EU, France) — transactional emails.
- Cloudflare (global edge) — hosting, CDN, DDoS protection.
- PostHog (USA, optional) — product analytics, only when enabled.
Your rights (GDPR, CCPA)
- Access: request a copy of your data — email privacy@openclawbundles.com.
- Delete: available self-service in Dashboard → Settings → Danger zone.
- Portability: we can export profile, purchase library and sales history on request.
- Object or restrict processing: email us and we'll review within 30 days.
Retention
Account data is kept as long as your account is active. When you delete your account, we delete personal data within 30 days. Purchase records (invoice metadata only) are retained up to 7 years for legal and tax reasons.
International transfers
When data leaves the EU (e.g. Stripe, PostHog), it is transferred under Standard Contractual Clauses approved by the European Commission.
Contact
Questions, data requests or complaints: privacy@openclawbundles.com.