Privacy Policy

1. Introduction

NoobClaw ("we", "our", "us") provides the NoobClaw web application, the NoobClaw desktop client, and the NoobClaw Browser Assistant Chrome/Edge/Firefox extension (collectively, the "Services"). This Privacy Policy explains, for each product, what data we collect, how we use and process it, where and how long we store it, and with whom we share it. If you do not agree with this policy, please do not use the Services.

2. Data We Collect

We collect only the data needed to run the Services you request. Specifically:

2.1 Account information you provide. When you create an account or sign in (in the web app, desktop client, or the Browser Assistant extension), we collect your username, email address, and password. Passwords are never stored in plain text — only a salted one-way hash is kept. You may optionally provide a contact handle (e.g., WeChat, QQ, or Telegram) if you choose to claim the optional contact bonus.

2.2 Device and technical information (for security and anti-abuse). When you register or sign in we collect a device fingerprint computed locally in your browser from characteristics such as user-agent, language, screen size, time zone and a canvas rendering; your IP address (observed by our servers); and the product and version you are using. This information is used solely to detect and prevent abuse — for example, blocking automated mass sign-ups that would drain new-user credits — and to secure your account.

2.3 Authentication token. After you sign in, a sign-in token is stored locally in your browser (via the extension's local storage) so you stay signed in. It is sent to our servers only to authenticate your own requests.

2.4 Task inputs and generated content. The Browser Assistant runs the engagement actions you configure (like, follow, favorite, comment) on the social accounts you are already logged into in your own browser. To do this, the target links you paste and the optional lead-in text you set are sent to our servers, where AI text for comments is generated. We process the target links and the generated comment text for the purpose of performing the actions you requested.

2.5 Billing information. If you purchase credits, order and payment-status information is processed through our payment providers. We do not receive or store your full card number.

What we do NOT collect: we do not collect your general browsing history, the content of pages unrelated to a task you started, your social-platform passwords, keystrokes, or your full payment-card details. The extension acts on a page only when you explicitly start a task for it.

3. How We Use and Process Data

• Create, authenticate and secure your account (username, email, password hash, token).
• Run the engagement tasks you configure and generate AI comment text (task links, lead-in text).
• Prevent fraud and abuse, and enforce fair use of new-user rewards (device fingerprint, IP address).
• Process purchases and allocate credits (order and payment-status data).
• Provide support and respond to your requests (email, contact handle).

We do not use your data for advertising, and we do not build advertising profiles.

4. How We Store and Protect Data

Account and task data are stored in access-controlled databases on our servers. Passwords are stored only as salted hashes. Sign-in tokens are held locally in your browser. Usage and ledger logs are retained for a limited period (currently up to 90 days) and then automatically purged; account records are kept while your account is active. We apply administrative and technical safeguards to protect data against unauthorized access, but no method of transmission or storage is 100% secure.

5. How We Share Data

We do not sell, rent, or trade your personal information. We share data only as needed to provide the Services:

• AI providers (e.g., DeepSeek) — we send the task/content text needed to generate AI comment text. We do not send your identity information to them.
• Payment providers — to process purchases you initiate.
• Legal — if required by law or to protect the rights, safety, and security of our users and Services.

6. Browser Assistant Extension — Permissions

The extension requests only the permissions needed for its single purpose (running the engagement actions you configure):

• Host access to the supported platforms — to perform the actions on the sites you select.
• debugger — to send trusted clicks/typing so actions behave like real interaction on the pages you chose. No page content is read or transmitted for any other purpose.
• storage — to keep your sign-in token and UI preferences locally.
• downloads — only when you explicitly save a video you selected.

7. Your Rights

You may request access to, correction of, or deletion of your account data by contacting us at the address below. You can also sign out at any time, which removes the local sign-in token from your browser. Note that any blockchain transaction records are public and immutable by the nature of the technology and cannot be deleted.

8. Children

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: [email protected]