Privacy Policy
Last updated: March 10, 2026
Introduction
R. AI Services ("we", "us", "our") operates the R. AI OpenClaw Hub platform at openclaw.restai.vn. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use our website, platform, APIs, and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.
Information We Collect
Account Information: When you register, we collect your email address, display name, and authentication credentials. Payment Information: When you subscribe to a paid plan, billing details are processed securely by Polar (polar.sh). We do not store your full payment card details on our servers. Polar's handling of your payment data is governed by their Privacy Policy (https://polar.sh/legal/privacy). Bot Configuration Data: We collect the settings you define for your bots, including system prompts, enabled skills and tools, model parameters (temperature, token limits), and response behavior configurations — all of which you have full control over. Usage Data: We automatically collect request counts, token consumption, response times, error rates, and performance metrics. Device & Log Data: We collect IP addresses, browser type, operating system, referring URLs, access timestamps, and pages visited for security monitoring and analytics.
How We Use Your Information
We use your information for the following purposes: (1) Service Delivery — to create and manage your account, deploy and operate your AI bots, and process your subscription payments; (2) Communication — to send service-related notifications such as usage alerts, billing confirmations, security warnings, and maintenance updates; (3) Improvement — to analyze usage patterns, diagnose technical issues, optimize platform performance, and develop new features; (4) Security — to detect and prevent fraud, unauthorized access, abuse, and other harmful activities; (5) Legal Compliance — to comply with applicable laws, regulations, legal processes, or governmental requests.
Data Security & Infrastructure
We take data security seriously and implement industry-standard measures: (1) Isolated Environments — each bot runs in a private, containerized cloud instance completely isolated from other users. Bot owners manage their bots exclusively through the OpenClaw Hub portal. End Users interact with bots only via supported messaging platforms. No direct infrastructure access is provided; (2) Encryption at Rest — all stored data is encrypted using AES-256 encryption; (3) Encryption in Transit — all data transmitted between your device and our servers is protected with TLS 1.3; (4) Zero Data Retention — conversation data between you and your AI assistant is not stored on our servers after processing; (5) Access Control — strict role-based access controls ensure only authorized personnel can access infrastructure; (6) Security Audits — we follow OWASP security best practices and conduct regular vulnerability assessments; (7) Infrastructure — our services are hosted on enterprise-grade cloud infrastructure with redundancy and automated backups for account and configuration data.
Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share information only in the following limited circumstances: (1) Payment Processors — we share billing information with Polar (polar.sh) to process subscription payments. Polar's data practices are governed by their Privacy Policy at https://polar.sh/legal/privacy; (2) Cloud Infrastructure — we use Google Cloud Platform to host and operate the Service, including Cloud Run for bot instances and Cloud Logging for operational monitoring; (3) AI Model Providers — bot requests are routed through OpenRouter to third-party AI model providers to generate responses, but we do not share your personal identity with these providers; (4) Messaging Platforms — we integrate with platforms such as Telegram to deliver bot services, sharing only the data necessary for message delivery; (5) Database Services — we use MongoDB Atlas for managed database hosting; (6) Legal Requirements — we may disclose information if required by law, court order, or government regulation; (7) Business Transfers — in the event of a merger, acquisition, or asset sale, your data may be transferred as part of the transaction with equivalent privacy protections.
Data Retention
Account data is retained for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records for tax compliance, which may be retained for up to 7 years). Conversation data follows our zero-retention policy and is not stored after processing. Usage logs and analytics data are anonymized and aggregated after 90 days.
Your Rights
Depending on your jurisdiction, you may have the following rights: (1) Access — request a copy of the personal data we hold about you; (2) Correction — request correction of inaccurate or incomplete data; (3) Deletion — request deletion of your personal data ("right to be forgotten"); (4) Export — receive your data in a structured, machine-readable format (data portability); (5) Opt-Out — unsubscribe from marketing communications at any time via email preferences or by contacting us; (6) Restriction — request that we limit the processing of your data in certain circumstances; (7) Objection — object to processing based on legitimate interests. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
International Data Transfers
Your data may be processed in countries other than your country of residence, including locations where our cloud infrastructure providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and equivalent data protection measures.
Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will promptly delete it. If you believe a child has provided us with personal data, please contact us at [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, sending you an email notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below.
Contact & Support
Support
Available on website (9:00–18:00)
Within 24 hours
Company Information
R. AI Investment & Technology Joint Stock Company
No. 14-15A, 7th Floor, Charmvit Tower, 117 Tran Duy Hung, Yen Hoa Ward, Hanoi, Vietnam
0111206567