Privacy Policy — Clawify by SIA JB Holdings

Effective Date: 26/04/2026

1. Introduction

This Privacy Policy explains how SIA JB Holdings (“we”, “us”, “our”) collects, uses, and protects information in connection with the Clawify application (the “Application”). We are committed to safeguarding your privacy and handling your data transparently.

2. Information We Collect

When you authenticate with the Application via Google OAuth, we may receive the following information from your Google account:

• Your email address
• Your name and profile picture
• Basic account information necessary for authentication

We also collect information from your Shopify store as required to provide the Application's features, including store data such as products, orders, customers, collections, and inventory.

3. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and authorize access to the Application
• Provide, operate, and maintain the Application's features
• Communicate with you regarding your account or the Application
• Improve and develop the Application

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

4. Data Storage and Security

Your data is stored on secure servers with industry-standard encryption and security measures. We retain your data only for as long as necessary to provide the Application's services or as required by law.

5. Third-Party Services and Sub-Processors

The Application integrates with third-party services that may process limited information on our behalf. Each service operates under its own privacy policy and applicable data protection terms:

• Shopify — store data, authentication, and billing. Privacy Policy
• Google — OAuth authentication when applicable. Privacy Policy
• PostHog (EU region) — product usage analytics and limited session recordings on onboarding flows. Data is hosted in the European Union. Privacy Policy
• Sentry — error monitoring and crash reporting, including limited session replays triggered only on errors. Privacy Policy
• Crisp — in-app customer support chat. Privacy Policy
• OpenRouter and underlying AI model providers (including DeepSeek, Moonshot, Anthropic, OpenAI, and others) — processing of chat messages and tool inputs sent to your AI agent.

6. Cookies and Tracking

The Application uses session cookies strictly necessary for authentication and functionality. In addition, we use a limited set of first-party and third-party cookies and similar technologies to measure product usage and to identify and fix bugs. Specifically:

• Authentication cookies set by Shopify and our session storage to keep you signed in.
• Product analytics cookies set by PostHog to measure anonymous, aggregated usage of features (such as which onboarding steps are completed). All form inputs are masked by default and we do not record content from your Shopify admin outside of the Application's own pages.
• Error monitoring cookies set by Sentry to associate crash reports with a session so we can reproduce and fix issues.

We do not use cookies for advertising, retargeting, or to share your personal data with third parties for their own marketing purposes.

6a. Usage Analytics and Opt-Out

To improve the Application, we collect anonymized usage events such as which features are used, how long onboarding takes, and which steps fail. Events are tied to your shop domain rather than to a personal identity, and sensitive content (form fields, customer names, order details) is masked or excluded.

You can opt out of usage analytics at any time by emailing us at the address below. We will disable analytics for your shop within a reasonable timeframe and the Application will continue to function normally.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your personal data
• Withdraw consent for data processing at any time
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us at the address below.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. When your data is no longer needed, it will be securely deleted.

9. Children's Privacy

The Application is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: