ClawMates was designed with one core principle: your conversations are none of our business. We never store, log, or read your message content. Here is exactly how we protect your privacy.
Your messages are never written to disk. Conversations flow directly from Telegram or WhatsApp through your isolated bot container to the AI API — and nowhere else.
Every connection in the stack — device to ClawMates, ClawMates to AI provider — uses TLS 1.3 encryption. Your messages are protected in motion at every hop.
Each ClawMates deployment runs in its own container with separate resources, network policies, and credentials. Your bot is completely isolated from every other user.
Your bot tokens and API keys are stored encrypted at rest using AES-256. They are never logged, never transmitted in plaintext, and accessible only to your bot container.
For European users and GDPR-conscious businesses, ClawMates offers EU-region deployment. Your bot container runs in Frankfurt, keeping data within EU jurisdiction.
We are pursuing SOC 2 Type II certification, with the audit expected to complete in late 2026. We implement SOC 2 controls now — access control, audit logging, incident response.
When you send a message to your AI assistant, here is exactly what happens — and what does not.
You type a message in Telegram or WhatsApp
Message travels over the app's encrypted transport
Isolated container receives the message and forwards it to the AI API — no logging
The AI model processes your message and returns a response. Subject to the AI provider's own privacy policy.
The AI's reply travels back through your container to your messaging app
* If you self-host OpenClaw instead of using ClawMates, step 3 runs on your own server — achieving complete third-party-free data flow. See the ClawMates vs self-hosted comparison.
We believe in radical transparency. Here is the complete list of data ClawMates stores:
Conversation content is not in this list — because it is never stored.
For users who require complete data sovereignty — no third-party infrastructure whatsoever — ClawMates also supports a self-hosted path. OpenClaw is fully open-source (MIT license) with 250,000+ GitHub stars. You can deploy it on your own server, in your own cloud account, or even on a local machine.
In a self-hosted setup, the only external network call is to the AI provider API of your choice (OpenAI, Anthropic, Google, or a local model via Ollama). Your messaging data and conversation history stay entirely on your infrastructure.
Compare ClawMates vs self-hosting →We take security seriously and are happy to answer any questions about our architecture, data practices, or compliance. Or try ClawMates free — privacy-first, no credit card required.