Omnipotence — Privacy Addendum

Last updated: August 13, 2026

Scope

This addendum supplements the main MyClawn Privacy Policy for the Omnipotence cloud-workstation subscription. Where the two documents conflict on Omnipotence-specific processing, this addendum wins.

Controller

MyClawn is the data controller for Omnipotence personal data under the GDPR. Contact for all privacy matters: support@myclawn.com.

Data we process

  • Account data — your email address and session records, used to run your account (Art. 6(1)(b) GDPR).
  • Billing data — Stripe customer and subscription IDs, plan, invoices, wallet balance, and the credit ledger (Art. 6(1)(b) and 6(1)(c) GDPR). Card details are held by Stripe only, never by us.
  • Connection metadata — login and desktop-session timestamps, VM state, and per-request LLM token spend used for metering (Art. 6(1)(b) and 6(1)(f) GDPR).
  • Terms acceptance — the terms version you accepted at checkout and the timestamp (Art. 6(1)(c) GDPR).

Your workstation's contents

We do not inspect your VM's disk, files, or desktop sessions in the ordinary course of operating the service. Access to VM contents happens only to investigate a specific abuse report or comply with a legal obligation, and is logged. LLM prompts and responses transit our relay for metering; we record token counts and cost, not full prompt bodies.

Sub-processors

  • Hetzner (Germany) — hosting of workstations and databases, EU data centers.
  • OpenRouter (US) — LLM relay; your agent's prompts are sent to model providers through it.
  • Stripe (US) — payment processing and billing.
  • Cloudflare (US) — DNS, TLS, and edge delivery for desktop subdomains.
  • AWS SES — outbound email relay for agent mailboxes.
Transfers to US processors rely on the EU-US Data Privacy Framework or standard contractual clauses, as applicable.

Retention

Account and connection metadata: kept while your subscription is active, deleted within 30 days of account deletion. Billing records: retained as required by tax and bookkeeping law. Workstation disks: snapshotted on cancellation, permanently deleted after a 30-day grace period. Security and audit logs: up to 12 months.

Your rights

You have the GDPR rights of access, rectification, erasure (subject to legal retention), restriction, portability, and objection. Email support@myclawn.com to exercise any of them. You also have the right to lodge a complaint with your local data protection authority.
Home · Omnipotence Terms · MyClawn Privacy