Privacy Policy

Information We Collect

We collect account information such as your email address and authentication details, information about your Brea plan and OpenClaw instances, and technical information needed to run and secure the service.

When you use the dashboard, we may process OpenClaw instance status, model settings, usage totals, estimated costs, and channel connection details such as Telegram bot metadata.

If you connect third-party services to your agent, such as Google, Notion, Dropbox, or Slack, we receive the credentials and data those services provide based on the permissions you grant. Google user data is described in more detail in the Google User Data section below.

If you choose to text yourself a setup link, we collect the phone number you provide only to send that requested setup message.

How We Use Information

We use information to create and secure your account, provision and manage OpenClaw instances, connect supported channels, show usage and billing information, provide support, prevent abuse, and improve reliability.

Google User Data

If you connect Google services such as Gmail, Google Calendar, or Google Drive to your agent, Brea accesses your Google user data through Google's APIs using OAuth. We only request the permission scopes needed for the features you connect, and we only access your Google data when you or the automations you configure ask the agent to do something with it, such as reading or drafting email, checking your calendar, or saving a file to Drive.

How we use Google user data: we use it solely to provide the user-facing features you request, such as briefings, email triage, scheduling help, and the automations you set up in your automation library. We do not use Google user data for advertising, and we do not sell it.

How we store Google user data: OAuth tokens are stored encrypted by our managed OAuth infrastructure provider and are used only to act on your behalf. Content retrieved from Google services is processed to fulfill your requests and automations; we retain it only as long as needed to provide those features and to operate your agent, and we remove it when it is no longer needed.

How we share Google user data: we do not transfer Google user data to third parties except as necessary to provide the features you request, such as processing by the model providers configured for your instance so the agent can respond, or as required for security purposes or to comply with applicable law. Our service providers may process this data only on our instructions. Humans do not read your Google user data unless you give us explicit permission for support, it is required for security or legal reasons, or the data has been aggregated and anonymized.

Brea’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models. Model providers that process your requests are not permitted to use your Google user data to train their models.

You can disconnect a Google integration at any time from your dashboard, which deletes the stored connection credentials so Brea can no longer access your Google account. You can also revoke Brea's authorization directly from your Google Account security settings at myaccount.google.com/permissions. You can request deletion of any stored Google user data by emailing [email protected].

SMS and Mobile Data

SMS setup messages are optional. We use your phone number only to send the setup text you request.

We do not share your text messaging consent, SMS opt-in data, or phone numbers with third parties or affiliates for marketing or any other purpose. This information is used only to deliver the message you requested through our SMS delivery provider and is never sold, rented, or transferred to third parties.

Service Providers

We use service providers to operate Brea, including hosting, authentication, database, messaging delivery, infrastructure, observability, and payment or billing services. They may process information only as needed to provide services to Brea.

We do not sell your personal information, and we do not share it for third-party advertising.

Model Usage and Customer Content

Brea routes OpenClaw model usage through managed infrastructure so we can attribute usage and costs to the correct instance. We avoid storing raw provider keys in the web app and limit access to operational data to what is needed to provide the service.

Content you send through your OpenClaw instance may be processed by configured model providers and connected channels so the agent can respond.

Cookies and Sessions

We use cookies and similar browser storage to keep you signed in, protect your session, and operate the dashboard. We do not use these tools to sell your information.

Retention

We keep information for as long as needed to provide Brea, comply with legal obligations, resolve disputes, secure the service, and maintain business records. We remove or anonymize information when it is no longer needed.

Security

We use technical and organizational safeguards designed to protect customer data. No system is perfectly secure, but we work to limit access, avoid exposing secrets, and protect sensitive operational data.

Your Choices

You can choose not to provide optional phone information, and you can connect or disconnect third-party integrations, including Google services, at any time from your dashboard. You may also contact us to request access, correction, or deletion of your personal information at [email protected], subject to legal and operational limits.

Policy Changes

We may update this policy as Brea changes. When we make material changes, we will update the date above.

Contact

If you have questions about this policy or how we handle personal information, email us at [email protected].