Privacy policy

Who we are

ReadyClaw is a product of SyntaxReady Inc. ("we", "us") at readyclaw.app. It has three parts: a command-line tool, a desktop app and this website. You can reach us at hello@readyclaw.app.

What stays on your computer

The command-line tool and the desktop app read the transcript files Claude Code writes to ~/.claude/projects on your machine. They work out token counts, costs, long-session and cache patterns locally. Without a ReadyClaw key connected, nothing leaves your computer.

What is sent when you connect a key and sync

Only aggregated numbers and findings, in a fixed format that cannot carry free text from your conversations:

• Per-day totals by project name (the folder's last name only, not its path) and model: turns, input, output and cache tokens, estimated cost, tool-call count.
• Per-session totals: a session identifier, project name, start and end time, models used, peak context size, estimated cost and counts.
• The recommendations ReadyClaw computed, with the short evidence lines that support them.
• Security findings, if the scan finds a credential-shaped string: its kind (for example a cloud key type), a masked preview showing only the first six and last three characters, and a twelve-character fingerprint used to avoid duplicates. The secret itself is never uploaded.
• Your computer's hostname, a random machine identifier, the tool version, and which ReadyClaw toolkit items are switched on.

What is never sent

Your prompts, Claude's replies, source code, file contents, file paths, command lines, tool inputs and tool outputs are never uploaded. The upload format is enforced by a schema on both the tool and the server, and an automated test checks that a detected secret never appears in the payload.

Account information and Sign in with Google

You can sign in with a Google account or with an email link. If you use Google, Google shares your email address, your name and your profile picture with our authentication provider. ReadyClaw uses your email address to identify your account, to send the sign-in and digest emails you ask for, and to attach your plan. We do not read your Gmail, Drive, Calendar or any other Google data, and we request no Google permissions beyond basic sign-in (openid, email and profile).

ReadyClaw's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use that information only to provide and improve the sign-in and account features you see in ReadyClaw. We do not sell it, use it for advertising, or give it to others except to run the service as described below.

Billing

Paid plans are handled by Stripe. Card details go to Stripe and never reach our servers. We store the Stripe customer reference and your plan so we can unlock features.

Who else handles your data

We use these providers only to run ReadyClaw, under their own security and privacy terms:

• Supabase: database, sign-in and server functions.
• Vercel: hosting for the website.
• Stripe: payments and the billing portal.
• Resend: sign-in links, the weekly digest and team invitations.
• Google: only if you choose Sign in with Google.

What we do not do

We do not sell your data, show advertising, or use your data to train AI models. If you opt in to benchmarks, your numbers are compared with a median across everyone who opted in, and are shown only once at least ten people are in the pool.

How long we keep it

On the Free plan, usage history older than seven days is removed automatically. On paid plans we keep history while your account is open so the dashboard can show your trend. Billing records may be kept by Stripe for as long as the law requires.

Your choices and deleting your data

You can stop syncing at any time by removing your key from the Setup page or the tool's configuration, and you can revoke any key or machine there. To have your account and all synced data deleted, email hello@readyclaw.app from the address on the account. We delete it within 30 days and confirm by email. You can also ask us for a copy of what we hold about you, or to correct it.

Security

Data is encrypted in transit and at rest by our infrastructure providers. Each account can read only its own rows, enforced in the database. API keys are stored as hashes. No system is perfectly secure, so we limit what we collect in the first place.

Children

ReadyClaw is for developers and is not directed at children under 16.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date above, and tell signed-in users by email before a material change takes effect.