Privacy Policy

1 Who We Are

Clawa is a content automation platform that enables creators and businesses to automate the production, scheduling, and publishing of short-form video content across social media platforms including TikTok, Instagram, Threads, and YouTube.

Clawa is operated by PT Move Property Group, a company registered under the laws of the Republic of Indonesia.

Data Controller: PT Move Property Group
Address: JALAN RAYA BEDULU, Bedulu, Blahbatuh, Gianyar, Bali 80581, Indonesia
Phone: +62 852 38468611
Email: admin@clawa.pro
Website: https://publish.clawa.pro

2 Information We Collect

We collect information that you provide directly, information collected automatically through your use of our platform, and information received from third-party services you connect to Clawa.

2.1 Information You Provide

2.2 Information Collected Automatically

We do not collect sensitive personal data such as health information, biometric data, racial or ethnic origin, religious beliefs, financial account numbers, or government identification numbers.

3 Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance — Processing necessary to provide you the Clawa service under our Terms of Service
• Legitimate interests — Improving platform security, preventing fraud, and enhancing our services
• Consent — Where you have explicitly consented, such as connecting your social media accounts via OAuth
• Legal obligation — Compliance with applicable laws and regulations in Indonesia and other jurisdictions

You may withdraw consent at any time by disconnecting your social media accounts or deleting your Clawa account. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

4 How We Use Your Information

• Service delivery — To provide, operate, and maintain the Clawa platform and its automation features
• Account management — To create and manage your account, process subscriptions, and send transactional notifications
• Content automation — To generate, schedule, and publish content on your behalf to connected social media accounts
• AI processing — To generate scripts, captions, and hashtags using AI language models based on your inputs
• Platform improvement — To analyze aggregated usage patterns and improve platform performance and features
• Security — To detect, prevent, and respond to fraud, abuse, unauthorized access, or security incidents
• Legal compliance — To comply with applicable laws, regulations, and lawful requests from authorities
• Communications — To send transactional emails and, with your consent, product updates (opt-out available at any time)

We do not sell your personal data to third parties. We do not use your personal data for advertising profiling or behavioral targeting unrelated to our service.

5 TikTok API Integration & Data

Clawa integrates with the TikTok for Developers Content Posting API to enable automated video publishing to your TikTok account. This section describes in detail how we handle TikTok-related data.

5.1 What We Access

• We request only the minimum permissions necessary to publish content on your behalf
• The only TikTok API scope we request is video.publish — which allows us to upload and post videos to your TikTok account
• We do not access your TikTok follower list, direct messages, analytics, liked videos, or any personal data beyond what is strictly required for posting

5.2 OAuth Token Storage

• When you connect your TikTok account, TikTok issues an OAuth 2.0 access token to Clawa
• This token is stored in encrypted form using AES-256 encryption in our secure database
• The token is used solely to make authorized API requests to publish content on your behalf

5.3 Revoking Access & Compliance

You may revoke Clawa's access to your TikTok account at any time through TikTok's security settings. Upon revocation, we will delete your stored OAuth token within 24 hours.

Our use of TikTok API data strictly complies with the TikTok Developer Terms of Service and all applicable data protection laws.

6 Google/YouTube API Integration & Limited Use

Clawa uses YouTube API Services to allow users to authenticate and publish content directly to their YouTube channels.

6.1 Limited Use Policy

Clawa's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6.2 AI Training Ban

6.3 Revoking Access

Users can revoke Clawa's access to their YouTube account at any time via the Google Security Settings page.

7 Meta (Instagram & Threads) API Integration

Clawa integrates with Meta Platforms to allow content publishing to Instagram and Threads.

• We request only the permissions required to publish media (e.g., instagram_basic, instagram_content_publish).
• OAuth tokens are encrypted and strictly used for content delivery.
• Users may revoke access at any time via their Meta account settings (Apps and Websites).

8 Data Sharing & Third Parties

We do not sell your personal data. We share your information only in the following limited and necessary circumstances:

9 Data Retention

We enforce strict automated data retention policies on our server clusters:

10 Your Rights & Choices

To exercise any right, contact us at admin@clawa.pro. We will respond within 30 days.

To submit a data deletion request, email admin@clawa.pro with subject line "Data Deletion Request" and your registered email address.

11 Security Measures

• Encryption in transit — All data transmitted via TLS 1.2/1.3 (HTTPS)
• Encryption at rest — Sensitive data including OAuth tokens encrypted with AES-256
• Password hashing — Passwords stored using bcrypt with minimum cost factor of 12
• Access controls — Principle of least privilege; staff access only data necessary

12 Children's Privacy

Clawa is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

13 International Data Transfers

Clawa is operated from Indonesia. If you access our platform from outside Indonesia, your data may be transferred to and processed in Indonesia or countries where our service providers operate.

14 Indonesian Data Protection (UU PDP)

We comply with Indonesia's Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi). To exercise your rights under UU PDP, contact us at admin@clawa.pro.

15 Cookies & Tracking

Clawa uses only essential cookies to operate our platform (Session, Authentication, Security). We do not use advertising cookies or third-party tracking pixels.

16 Changes to This Policy

When we make material changes, we will update the "Last updated" date, notify registered users by email at least 14 days before changes take effect, and post a prominent notice on the platform.

17 Contact Us & Data Requests