Privacy Policy

Our Commitment to Your Privacy

At Ampere.sh, we believe privacy is fundamental. We built our service so that we cannot see your conversations. This Privacy Policy explains how we collect, use, store, and protect your data when you use our managed OpenClaw hosting service.

1. Data Collection

We only collect information that is necessary to provide our VPS hosting service. Here is what we collect:

• Account Information — Email address, name (optional), and authentication data stored securely via Firebase Auth.
• API Keys — Your LLM provider API keys (e.g., Anthropic, OpenAI) and messaging platform tokens that you voluntarily provide.
• Instance Configuration Data — VPS IP address, region, status, and configuration settings necessary to manage your service.
• Billing Information — Payment data processed securely through our third-party payment processor, Stripe.

2. Data Usage

We use your collected data for the following purposes:

• Service Provisioning — To create, configure, and manage your VPS instance.
• Authentication — To verify your identity and provide secure access to your account.
• Payment Processing — To process subscriptions and issue refunds when applicable.
• Communication — To send you service updates, billing notifications, and respond to support requests.
• Service Improvement — To analyze usage patterns and improve our service reliability and performance.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage and Security

We protect your data with industry-standard security measures and store it as follows:

• Encryption — All sensitive data (API keys, tokens) is encrypted at rest using AES-256 encryption before storage.
• Database Storage — Account data is stored in Firebase's secure database infrastructure.
• VPS Isolation — Each customer receives their own VPS with complete isolation from other users' data.
• Network Security — OpenClaw gateway binds to localhost only, preventing external access to your services.
• No Server Access — We do not retain SSH access to your VPS after initial provisioning.

4. What We DON'T Store

These are the most important things we do not and cannot access:

• Chat conversations — Your messages are never sent to our servers.
• AI responses — All LLM API calls go directly from your instance to your chosen provider.
• OpenClaw memory — Your bot's memory files stay on your VPS.
• VPS credentials — We don't retain SSH access after provisioning.

5. How Your Data Flows

When using Ampere.sh, data flows as follows:

1. You send a message via your chosen platform (WhatsApp, Telegram, Discord, Signal, iMessage).
2. The platform sends the message directly to your OpenClaw instance.
3. Your instance sends an API request directly to your LLM provider using your own API keys.
4. The LLM provider responds directly to your instance.
5. Your instance sends the response back to you via the messaging platform.

Ampere.sh infrastructure is never in the path of your conversations. We provide compute, networking, and uptime only.

6. Third-Party Services

We use the following third-party services:

• Firebase — Authentication and database hosting.
• Stripe — Payment processing.
• Hetzner Cloud — VPS infrastructure.

Each of these services has their own privacy policies and data handling practices.

7. Data Retention and Deletion

We retain your account and instance data while your subscription is active. If you cancel your subscription or request a refund, your VPS and all associated data are deleted within 24 hours. You may request account deletion at any time by contacting support@ampere.sh.

8. Google API Services and User Data

Our application may integrate with Google API Services. This section explains how we access, use, store, and share Google user data:

Google User Data We Access

When you connect your Google account to our service, we may access the following data:

• Authentication Data — Email address and profile information used for account creation and sign-in.

How We Use Google User Data

We use Google user data for the following purposes:

• Account Management — To create and manage your user account.
• Authentication — To verify your identity and provide secure access.
• Service Configuration — To configure your VPS instance based on your preferences.

Storage of Google User Data

Google user data is stored as follows:

• Secure Database — Your Google account information is stored securely in our Firebase database.
• Encryption — All sensitive data is encrypted at rest using AES-256 encryption.
• OAuth Tokens — Google OAuth tokens are stored securely and used only for authorized API calls.

Sharing of Google User Data

We do not sell, rent, or share your Google user data with third parties for their marketing purposes. We may share data only:

• With Service Providers — With Firebase for authentication and database hosting, and Stripe for payment processing.
• As Required by Law — When required to comply with legal obligations or protect our rights.

User Control and Deletion

You can revoke our application's access to your Google data at any time through your Google Account settings. If you delete your account with us, we will delete your Google user data from our systems within 24 hours.

9. Your Privacy Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data

To exercise these rights, contact us at support@ampere.sh.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

11. Contact Us

If you have questions about this privacy policy or how we handle your data, contact us at support@ampere.sh.