Privacy Policy

Last updated: February 13, 2026

LobsterTank ("we," "us," or "our") operates a managed hosting service for OpenClaw, an open-source personal AI assistant. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

1. Information We Collect

Account Information

  • Email address — used for account creation, authentication, and service communications.
  • Phone number — provided by you to enable SMS interactions with your AI assistant. Your phone number is verified via a one-time code sent by SMS.

SMS Message Data

  • Message content — the text of SMS messages you send to and receive from your AI assistant. Messages are relayed through our systems to your dedicated server instance.
  • Message metadata — timestamps, delivery status, and phone numbers associated with each message.

Service Data

  • AI provider API keys — encrypted at rest using AES-256-GCM encryption. We never store your keys in plaintext.
  • Instance information — server status, IP addresses, and configuration data for your hosted AI assistant.
  • Usage data — service interactions, feature usage, and operational logs necessary to maintain and improve the service.

Payment Information

Payment processing is handled by Stripe. We store only a Stripe customer identifier — we never store credit card numbers, bank account details, or other financial information on our servers.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the LobsterTank service
  • Route SMS messages between you and your AI assistant
  • Verify your identity and phone number
  • Process payments and manage your subscription
  • Send service-related communications (e.g., verification codes, service alerts)
  • Monitor and maintain system security and reliability
  • Comply with legal obligations

3. How We Do NOT Use Your Information

  • We do not sell, rent, or share your personal information with third parties for marketing purposes.
  • We do not use your SMS message content for advertising, marketing, or profiling.
  • We do not share your data with data brokers or analytics companies.
  • We do not train AI models on your message content.

4. SMS Messaging

By registering your phone number with LobsterTank, you consent to receive SMS messages from our service, including:

  • Phone number verification codes
  • Responses from your AI assistant
  • Service notifications (e.g., instance status changes)

Message frequency varies based on your usage. Standard message and data rates from your carrier may apply.

Opt-out: You can stop receiving SMS messages at any time by texting STOP to our service number, or by removing your phone number in your account settings. This will disable SMS interactions with your assistant but will not delete your account.

5. Data Storage and Security

  • Database: Account data is stored in Neon Postgres with encryption in transit (TLS).
  • Encryption: Sensitive data (API keys, SSH keys) is encrypted at rest using AES-256-GCM.
  • Instance isolation: Each user's AI assistant runs on a dedicated virtual private server, isolated from other users.
  • SMS relay: Messages are transmitted over secure connections. We use Twilio as our SMS provider, subject to Twilio's Privacy Policy.

6. Third-Party Service Providers

We use the following third-party services to operate LobsterTank. These providers access your data only as necessary to perform their services:

  • Twilio — SMS messaging infrastructure
  • Hetzner Cloud — Virtual private server hosting for AI assistant instances
  • Neon — Database hosting and authentication
  • Stripe — Payment processing
  • Vercel — Application hosting

We do not share your information with any other third parties except as required by law.

7. Data Retention

  • Account data is retained as long as your account is active.
  • SMS messages are retained for the purpose of maintaining conversation history with your assistant. You may request deletion at any time.
  • Server instances and all associated data are permanently deleted when you destroy an instance.
  • Upon account deletion, all your data is permanently removed from our systems within 30 days.

8. Your Rights

You have the right to:

  • Access your personal data by viewing your account settings and message history
  • Correct inaccurate information in your account settings
  • Delete your account and all associated data
  • Export your data upon request
  • Opt out of SMS communications at any time

To exercise any of these rights, contact us at the email address below.

9. Children's Privacy

LobsterTank is not intended for use by anyone under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the service. Your continued use of LobsterTank after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at: privacy@lobstertank.com