Privacy Policy
Last updated: May 21, 2026. This document is a practical product/legal draft and should be reviewed by counsel before relying on it for regulated enterprise contracts.
Overview
AdClaw Host is operated by Citedy as a hosted workspace launcher for AdClaw. This policy explains how we think about customer workspace data, optional managed AI services, Citedy-powered actions, and enterprise data-residency options.
This page is a product and privacy summary, not legal advice. Enterprise customers can contact us for a Data Processing Addendum (DPA), security review, and deployment-specific data-flow description.
Customer workspace data
AdClaw Host creates a private AdClaw workspace for each customer. Workspace data may include account identifiers, plan status, workspace lifecycle metadata, backup metadata, generated content, prompts, tool outputs, configuration, and customer-provided API keys or integration settings.
Customer-provided provider keys are intended to be used only for the workspace and integrations the customer configures. Customers should not enter secrets, personal data, or regulated data unless they have confirmed that their selected deployment mode, providers, and policies meet their requirements.
EU-ready hosting option
Enterprise customers can request an EU-ready deployment. When enabled, AdClaw configures the core workspace runtime and AdClaw-managed storage using Cloudflare's EU data-residency controls where supported.
This EU-ready option covers the core AdClaw workspace. Optional managed services may involve separate processors and data flows, as described below.
Optional managed services and third-party providers
Optional managed services, including bundled Host AI messages, Citedy credits, content publishing tools, third-party LLM providers, search providers, analytics integrations, and customer-configured API keys, may involve separate processors and data flows.
Customers that require strict EU-only processing can disable managed AI/Citedy-powered actions and configure AdClaw to use their own approved enterprise LLM, search, analytics, and publishing providers.
Cloudflare platform privacy and security basis
AdClaw Host is built on Cloudflare infrastructure. Cloudflare states that its services are designed to satisfy GDPR requirements, supports customer DPAs, uses Standard Contractual Clauses (SCCs) and supplementary measures for international transfers, and participates in applicable Data Privacy Frameworks.
Cloudflare also maintains ISO 27001, ISO 27018, and ISO 27701 certifications. ISO 27018 and ISO 27701 are especially relevant to privacy controls for personal data processing and GDPR-aligned privacy management.
Your choices
- Use bundled Host AI and Citedy-powered actions for convenience.
- Bring your own enterprise LLM, search, analytics, and publishing providers.
- Request an EU-ready enterprise deployment where runtime and AdClaw-managed storage are configured for Cloudflare EU jurisdictions where supported.
- Disable optional managed services if your compliance program requires strict control over subprocessors and data flows.