Privacy Policy

MediaClaw Inc ("MediaClaw", "we") operates the MediaClaw service at app.mediaclaw.network. We are a Nevada corporation at 6740 Tomiyasu Ln, Las Vegas, NV 89120, USA. Contact us at info@mediaclaw.io about anything in this policy.

For the data our customers put into MediaClaw, we act as a processor (or "service provider") on their behalf. For our own account, billing and website data, and for the media contact database described in section 7, we act as a controller.

If we change this policy we will update the effective date above. For material changes we will also notify account owners by email or in the app at least 14 days before they take effect.

• Account information (from you): name, email address, password (stored by our authentication provider as a hash; we never see it), your organization, your role and seat, and team invitations.
• Customer content (from you and your team): company information, documents you upload, campaign settings, strategy, press releases, pitches, approvals, chat with the in-app assistant, and reports.
• Outreach and replies: the messages sent through MediaClaw, their recipients, delivery status, and the replies journalists send to MediaClaw's reply address (reply.mediaclaw.network).
• Connected mailbox information (from Google or Microsoft, if you connect a mailbox): see sections 5 and 6.
• Media contact information (from public and commercial sources): see section 7.
• Billing information: when you subscribe online, payment is handled by Stripe. We receive your billing contact, plan and payment status, not your full card number.
• Technical information: IP address, browser type, request logs and error logs, which our hosting providers and our servers generate when you use the service.

We do not sell personal information, and we do not use it for advertising.

If you connect a Google account, MediaClaw requests only these permissions: openid and email, to learn your Google account's email address, and gmail.send, to send email from your Gmail address.

• What we access: your email address, a unique account identifier, and permission to send mail. MediaClaw cannot read, search, store or analyze the messages, contacts, labels or settings in your Gmail account, and does not attempt to.
• How we use it: to send the outreach messages and replies that you or your team approve, or that you have set MediaClaw to send automatically, from your address. Replies are directed to MediaClaw's reply address so your team can track them. If you attach your mailbox to a campaign, teammates with approval rights on that campaign can send approved messages from it, and you can detach or disconnect it at any time. Google keeps a copy of each sent message in your Sent folder.
• How we store it: we store your email address, display name, account identifier, the granted permissions and an OAuth refresh token. The refresh token is encrypted at rest. We never receive your Google password.
• Sharing: we do not sell Google user data. We do not use it for advertising, and we do not use it to train or improve generalized AI or machine-learning models. It is not sent to AI model providers. We do not transfer it to anyone except as necessary to provide this feature, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you. Humans at MediaClaw do not read it except with your consent, for security purposes such as investigating abuse, or to comply with applicable law.
• MediaClaw's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Revoking access: disconnect the mailbox in MediaClaw under Settings → Email sending, or remove MediaClaw at https://myaccount.google.com/permissions. When you disconnect in MediaClaw we revoke the token with Google and delete our stored copy immediately. We keep a record that the connection existed (address, provider, dates), with no token. If you revoke at Google directly, MediaClaw stops being able to send and marks the connection as needing reconnection. When your account is deleted, the connection record is deleted too.

If you connect a Microsoft account (work, school or personal), MediaClaw requests these Microsoft Graph delegated permissions: openid and email (your identity and address), offline_access (to keep the connection working without signing in again), User.Read (your name and email address from your profile), and Mail.Send (to send mail as you).

• MediaClaw cannot read your mailbox, calendar, contacts or files, and does not attempt to.
• The uses, team sending, storage and encryption, and the commitments not to sell, advertise, train AI or ML models, or allow human reading, are the same as in section 5. Microsoft keeps a copy of each sent message in your Sent Items.
• Revoking access: disconnect in MediaClaw under Settings → Email sending. We delete our stored token immediately. Microsoft does not offer apps a way to revoke your consent for you, so also remove MediaClaw at https://account.microsoft.com/privacy/app-access (personal accounts) or https://myapps.microsoft.com (work or school accounts). When your account is deleted, the connection record is deleted too.

MediaClaw helps its customers find journalists, editors and other media professionals who cover topics relevant to their news.

• What we collect: professional information only. That means your name, the outlets you write for, your beat, your published articles and bylines, your professional email address, and your public professional social profiles.
• Sources: publishers' websites and bylines, public media directories and profiles, public social-media bios, web and news search services, and email-finding and verification services (Hunter, Apollo).
• Why: our legitimate interest, and our customers', in contacting journalists about news relevant to their work. We collect only what is published in a professional capacity.
• Outreach safeguards: a person on the customer's team reviews and approves every pitch before it is sent; each pitch says how to opt out; and replies that ask to stop are honored automatically.
• Opting out: reply "unsubscribe" or "stop" to any message sent through MediaClaw, or email info@mediaclaw.io. We add your address to a do-not-contact list that applies to every MediaClaw customer, and on request we remove your profile from our media database. We keep the minimum needed to make sure you are not contacted again: your address, or your name and outlet.
• Your rights: you have the rights in section 12, and you can exercise them at the same address.

MediaClaw uses third-party AI models, accessed through OpenRouter and xAI, to research companies and media, draft content, classify replies and summarize results. Content you provide and media contact data are sent to these providers to generate outputs.

• Content we treat as confidential (press releases, talking points, strategy, social posts, chat and interviews) is sent only to providers that do not retain it and do not use it for training.
• Other content is processed under the providers' API terms.
• MediaClaw does not use your content to train AI models.
• AI outputs can be wrong. Review everything before you approve it.

We use these service providers, each bound by contract to process data only to provide its service to us:

Our servers and databases are in Germany (Hetzner, Vercel Frankfurt, Supabase Frankfurt). Some providers, including the AI, search, email and billing providers, are in the United States and other countries. Where personal data from the EEA, UK or Switzerland is transferred, we rely on the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework.

Depending on where you live, you can ask to access, correct, delete or export your personal information, to object to or restrict our processing of it, and to withdraw consent.

• EEA and UK residents: you can also complain to your local data protection authority.
• California residents (CCPA/CPRA): you have the right to know, delete and correct, and not to be discriminated against for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics. You can use an authorized agent.
• How to make a request: email info@mediaclaw.io. We will verify your identity and respond within 30 days.
• If your data was entered by one of our customers, such as your agency, we may refer you to them and help them respond.

• Encryption in transit (TLS) on every connection.
• Mailbox tokens encrypted at rest with a key held only on our servers.
• Passwords handled by our authentication provider, never stored by us.
• Role-based access, so each user sees only their organization's companies.
• Least-privilege staff access, and audit logs of sensitive actions.
• Spend limits and screening of uploaded files.
• Nightly verified backups.

No system is perfectly secure. We will notify affected customers of a breach as the law requires.

We use only cookies that the service needs: login session cookies and a short-lived cookie that holds a team invitation. We also use browser local storage to remember interface choices, such as your selected campaign. We do not use analytics, advertising or tracking cookies.

MediaClaw is a business service and is not directed at anyone under 18. We do not knowingly collect information from children.

MediaClaw Inc, 6740 Tomiyasu Ln, Las Vegas, NV 89120, USA. info@mediaclaw.io

If you join the MediaClaw waitlist on our website, we collect your name, work email address and company or agency, and, if you provide them, your phone number, your role and your website. We also record when you submitted the form, your IP address and your browser's user agent, to prevent spam and abuse.

We use this information to review your request, contact you about the beta and early access, and tell you about our launch. Our legal basis is your request, and our legitimate interest in responding to it.

If you tick "Send me the sales deck as well", you consent to receive our sales deck and related sales follow-up by email. That box is unticked unless you tick it. You can withdraw consent at any time by replying to any of our emails or writing to info@mediaclaw.io, and it does not affect your place on the waitlist.

Waitlist details are stored on our servers in Germany. MediaClaw staff receive an internal alert (via Telegram) when a request arrives. We keep waitlist details for up to 12 months after your last submission, or until you become a customer or ask us to delete them, whichever comes first.