Privacy Policy

LeadStryker AI is operated by ClawHire AI Inc (“we”, “us”). This policy covers three groups of people:

• Customers and their teams: people who have a LeadStryker AI account.
• Prospects: people whose business contact details a customer keeps in their workspace, or who receive a message a customer sends through LeadStryker AI.
• Visitors: people who look at our website.

For the data in a customer’s workspace, including prospect details, the customer decides why and how it is used. We store and process it on the customer’s behalf and follow their instructions. For account, billing and security data, we decide how it is used and we are responsible for it.

Account details

Your name and email address, the businesses you belong to and your role in each, and invitations you send or receive. Your password is stored only as a one-way scrypt hash, so we cannot read it. If you turn on two-step sign-in, its secret is stored encrypted and your recovery codes are stored as hashes.

What you put in your workspace

Your business profile and knowledge base, including what our research reads from your own public website. Your ideal customer profiles, companies, contacts, lists, deals, campaigns, message drafts, notes, tasks, files you import, compliance settings, consent records and do-not-contact lists.

Prospect details

Business contact information about the companies and people a customer wants to reach: names, job titles, work email addresses, phone numbers, company names, websites, locations and public profile links. It comes from five places: what the customer types in or imports, forms the customer publishes that people fill in themselves, public web pages and search results, the open business listings published by the Overture Maps Foundation, and data providers the customer connects. Facts found by research keep a link to where they were found.

Messages and calls

• Emails and text messages sent through LeadStryker AI, and the replies to them.
• If you connect a Gmail or Microsoft 365 mailbox, we read incoming mail in it to find replies to your outreach and show them in your inbox. On first connection we look back 7 days.
• Call records: who was called, when, for how long, and the outcome you log.
• Call recordings, only if you turn recording on. Recordings are kept in your own Twilio account, and we store the link to them.

Connections to other services

The keys and sign-in tokens for services you connect. They are encrypted with AES-256-GCM before they are stored.

Billing

Your plan, your subscription status, the identifiers Stripe gives us for your customer record and subscription, and the payment events Stripe reports to us, such as an invoice being paid. Card numbers are entered on Stripe’s pages and never reach our servers.

Help requests

What you write when you ask our team for help, and our replies. A request is sent with your name, your email address and the workspace you were in. The owner of the account you work in can read the requests their team sends. Our team may also keep its own notes about your account while helping you.

Technical and security records

• Sign-in sessions, with the IP address and browser type used.
• A log of important actions in each business, such as team changes, exports and billing actions, with the IP address they came from.
• Counts of what your account uses, such as AI calls, discovery runs and emails sent, so that plan limits can be applied.
• Counters that slow down repeated sign-in attempts.

• To provide the service: run your research and discovery, send what you approve, show your replies and keep your records.
• To keep accounts secure and to prevent abuse.
• To bill you and apply the limits of your plan.
• To send you emails about your account: address verification, password resets, invitations, and notices about your workspace or about changes to the service.
• To answer you when you ask for help.
• To fix faults and understand how the product is used, from our own records and logs.
• To meet our legal obligations.

We do not sell personal information. We do not share it for advertising. We do not build a shared database of prospects: what one customer’s workspace holds is not made available to another customer.

When you use an AI feature, the text needed for that task is sent to an AI model provider and the result comes back to your workspace. By default that provider is Anthropic. If you connect your own AI account, the text goes to the provider you chose instead.

We do not use your workspace data to train AI models. AI results can be wrong, which is why outreach is always shown to you for approval before it is sent.

Companies that help us run the service

They may use the data only to provide their service to us.

Railway

Hosts the application and its database.

Receives: Everything stored in the service.

Anthropic

Runs the AI models that research, score and draft.

Receives: The text an AI task needs, such as your business description, a prospect's company details, or a draft message.

Resend

Delivers the emails we send you about your account.

Receives: Your email address and the content of the message.

Stripe

Takes payments and manages subscriptions.

Receives: Your account name, billing email and plan. Card details you enter on Stripe's pages go to Stripe only.

Services you choose to connect

These receive data only if you connect them, with an account or key of your own. Each handles data under its own terms and privacy policy.

• AI models: your own Anthropic, OpenAI or OpenRouter account.
• Web search and page reading: Brave Search and Firecrawl.
• Contact and company data: Apollo, People Data Labs and Hunter.
• Email: your own Resend account, Gmail or Google Workspace, and Microsoft 365.
• Text messages and calls: Twilio.

Connected mailboxes

We use access to a connected Gmail or Microsoft 365 mailbox only to send the outreach you approve and to find and show the replies to it. We do not use mailbox data for advertising, and we do not use it to train AI models. LeadStryker AI’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Other cases

• Your team: people you invite to a business can see its data, according to the role you give them.
• The people you contact: messages you send go to their recipients and to the email and phone companies that deliver them.
• Our staff: a small number of authorized people can access account data when that is needed to support you, keep the service secure or fix a fault.
• The law: we disclose information when the law requires it, or when it is needed to protect someone’s safety or our legal rights.
• A change of ownership: if ClawHire AI Inc is sold or merged, information may pass to the new owner. We will tell you before that happens.

We use a small number of cookies, all of them our own. They sign you in and remember your display settings. None of them is used for advertising or to follow you across other websites.

The product also keeps a few interface preferences in your browser’s own storage, such as whether the side menu is collapsed, your saved list views, and an unfinished setup form. These stay on your device.

When you pay or manage billing, you do it on pages run by Stripe, which sets its own cookies under its own policy.

Businesses use LeadStryker AI to find and contact other businesses. If you received a message, the business that sent it chose to contact you and is responsible for that choice. Your details sit in that business’s own workspace. We do not sell them or publish them.

• To stop emails: use the unsubscribe link in the message. The product then blocks further campaign emails from that business to your address.
• To stop texts: reply STOP.
• To learn what a business holds about you, or to have it deleted: ask that business, or write to us with the email address or phone number that was contacted. We pass your request to the business, which is responsible for acting on it, and we act on it ourselves where the law requires us to.

Some businesses collect enquiries with a form that we host. The business named at the top of the form runs it and decides what happens with your answers. We store them on that business’s behalf.

• What is kept: what you typed, whether you ticked the text-message box, the exact wording you agreed to, the time you sent the form, your IP address, your browser’s description of itself, and the address of the page the form was on when your browser sent it.
• What the form page does not do: it sets no cookies and runs no scripts.
• What happens next: your answers become a contact record in that business’s workspace, and the business may contact you about your request. The form gives the business permission to send you text messages only if you ticked the box for them. Where the business asks for a second confirmation, you first get one text asking you to reply YES.
• To stop messages, see what is held or have it deleted: the choices in section 7 apply to you as well.

• See and correct: you can view and edit your profile and your workspace data in the product at any time.
• Take a copy: contacts and companies can be exported as spreadsheet files from their list pages.
• Archive: an owner can archive a business from its settings. Archiving hides the business. It does not delete its data.
• Delete: to have a business or your whole account deleted, write to us using the details in section 15. We delete it within 30 days of confirming the request came from you.

Depending on where you live, the law may give you rights to access, correct, delete or receive a copy of your personal information, and to object to or limit some uses of it. We honor these requests from anyone, wherever they live, and we will not treat you worse for making one. If you are unhappy with our answer, you can complain to the data protection or consumer protection authority where you live.

We keep your account and workspace data for as long as your account is open. We do not delete workspace data on a schedule: it stays until you delete it or ask us to.

When you ask us to close your account, we delete its data within 30 days. We keep only what we must: records of payments, for as long as tax and accounting law requires, and the limited records needed to resolve a dispute or keep the service secure. Copies held in backups are removed as those backups expire.

• Connections to LeadStryker AI are encrypted with HTTPS.
• Passwords are stored as scrypt hashes. Keys and tokens for connected services are encrypted with AES-256-GCM.
• Two-step sign-in with an authenticator app is available to every account.
• Each business’s data is kept separate, and access inside a business follows the role each person has been given.
• Important actions are written to an audit log, which each business can review in its Compliance Center.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you without undue delay. If you think your account has been misused, write to us straight away.

ClawHire AI Inc is based in the United States, and the companies that help us run the service process data in the United States and in other countries. If you use LeadStryker AI from elsewhere, your information will be processed outside your own country.

LeadStryker AI is a tool for businesses. It is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

When we change this policy we update the date at the top of the page. If a change is significant, we will also tell you by email or in the product at least 30 days before it applies.

For any question about this policy, or to make a request about your information, write to:

Email: [email protected]

See also our Terms of Service.