Privacy Policy
Last updated: February 5, 2026
🔒 Privacy by design
Moltbox is built on a fundamental principle: your AI agent data stays on your hardware. We do not access, store, or process your agent conversations, files, memories, or any content handled by your local AI agent.
1. Who We Are
Atono Labs ("Company", "we", "us") operates the Moltbox product suite, including Moltbox Desktop, Moltbox Hardware, Moltbot, and OpenClaw. This Privacy Policy explains how we collect, use, and protect information when you use our products and visit our websites (moltbox.io, molt.bot, openclaw.ai).
2. What Data Stays Local (We Never See It)
The following data is processed and stored exclusively on your device. We have no access to it:
- Agent conversations: All messages between you and your AI agent.
- Agent memory: Persistent context, notes, and learned information.
- Connected accounts: Your messaging platform credentials (Telegram, Discord, WhatsApp, etc.).
- Files and documents: Any files your agent accesses or creates.
- API keys: Your third-party AI provider credentials (Anthropic, OpenAI, etc.).
- Automation data: Cron jobs, workflows, and task outputs.
3. What We Do Collect
We collect limited information necessary to provide and improve our Services:
Account Information
- Email address (for account creation and communication).
- Payment information (processed by our payment provider; we do not store card details).
- Subscription status and billing history.
Usage Analytics (Optional)
- Anonymous product usage metrics (e.g., feature usage frequency, error reports).
- Hardware model and OS version (for compatibility).
- These analytics can be disabled entirely in the application settings.
Website Data
- Standard web server logs (IP address, browser type, pages visited).
- Waitlist registration (email address only).
- We do not use third-party tracking cookies.
4. How We Use Your Information
- To provide, maintain, and improve our Services.
- To process payments and manage subscriptions.
- To send important product updates and security notices.
- To respond to support requests.
- To analyse aggregate usage patterns (never individual agent data).
5. Third-Party AI Providers
When your Moltbox agent communicates with third-party AI providers (Anthropic, OpenAI, Google, etc.), those interactions are governed by the respective provider's privacy policies. Key points:
- Moltbox sends prompts directly from your device to the AI provider — we do not act as an intermediary.
- We do not log, intercept, or store these communications.
- We recommend reviewing your AI provider's data retention and training policies.
- You can configure your agent to use local/self-hosted models for maximum privacy.
6. Data Sharing
We do not sell, rent, or share your personal information with third parties except:
- Payment processing: With our payment provider to process transactions.
- Legal requirements: When required by law, subpoena, or court order.
- Safety: To protect the rights, property, or safety of our users or the public.
7. Data Security
We implement appropriate technical and organisational measures to protect the information we collect. For your local agent data, security is your responsibility — we recommend:
- Enabling full-disk encryption on your Moltbox device.
- Using strong, unique passwords for connected accounts.
- Keeping your Moltbox software updated.
- Restricting physical access to your hardware.
8. Data Retention
We retain account information for as long as your account is active. Upon account deletion, we remove your personal information within 30 days, except where retention is required by law. Usage analytics are anonymised and aggregated.
Your local agent data is stored indefinitely on your device until you choose to delete it.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Data portability.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at privacy@atonolabs.com.
10. Children's Privacy
Our Services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children.
11. International Transfers
If you access our Services from outside the jurisdiction where Atono Labs operates, your information may be transferred to and processed in other jurisdictions. We ensure appropriate safeguards are in place for such transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through our Services. The "Last updated" date at the top reflects when this policy was most recently revised.
13. Contact
For privacy-related questions or requests, contact us at:
- 📧 privacy@atonolabs.com
- 🏢 Atono Labs