What ClawTab Is
ClawTab is an open-source macOS desktop application for scheduling and managing Claude Code agents, shell scripts, and AI jobs. It includes a desktop app, CLI tools, a mobile/web remote interface, and an optional relay server for remote access.
What Data We Collect
Desktop App
The ClawTab desktop app runs entirely on your machine. Job configurations, logs, and secrets are stored locally. Release builds send anonymous app-open events to ClawTab, using a random installation identifier. Job contents, logs, and secrets are not included. You can disable this in Settings, General, Usage analytics.
Relay Server (Remote Access)
If you use ClawTab Remote, your device connects to a relay server to enable phone-to-desktop communication. The relay server stores:
- Your email address, display name, and sign-in identifiers (for authentication and workspace sharing)
- A salted password hash when you use email and password sign-in
- Device registration tokens (for pairing your desktop and mobile devices)
- Push notification tokens (for delivering notifications to your device)
- Workspace sharing relationships (which users share access with each other)
- Account preferences and notification history, including agent questions, context, answer options, and your responses
Live terminal output and file-transfer payloads pass between your devices through the relay in real time. Agent questions and their context are retained in notification history so you can review and answer them. Commands and answers you send are routed to your connected host.
Usage Analytics
Our website and hosted web Remote use Google Analytics to understand which pages help visitors get started. We measure product links, installation-command copies, web sign-in, successful pairing, and the first online owned host observed in a browser. Website installation steps are also recorded by ClawTab with random browser and session identifiers, entry pages, and referrer groups. A short-lived first-party cookie carries the entry page between our website and web Remote.
These events use browser identifiers and fixed product labels. We do not send account identifiers, email addresses, machine names, pairing codes, repository paths, terminal content, or agent prompts to Google Analytics. Analytics is disabled when your browser sends a Do Not Track or Global Privacy Control signal. Release builds of Remote and desktop send anonymous app opens, setup attempts, connected hosts, live terminal views, sent agent replies, Relay upgrade views, checkout attempts, and confirmed Apple purchase observations to ClawTab. ClawTab forwards the fixed native event and platform labels to Google Analytics through its backend so website and app funnels can be reviewed in one property. These use a random installation identifier and a session identifier, with fixed event and platform labels. You can disable this in Remote Settings, Account, Usage analytics, or desktop General settings. Self-hosted Remote connections do not send these funnel events.
Self-Hosting
You can run your own relay server. In that case, all data stays on your infrastructure. The relay source code is open source and available for audit.
How We Use Your Data
- Email addresses are used for account authentication and workspace sharing lookups
- Device tokens are used to route messages between your paired devices
- Push notification tokens are used to deliver job completion and agent question alerts
We do not sell your personal data or use it for advertising. Usage analytics are used to improve product onboarding.
Security
All relay connections use TLS encryption. The authentication system uses three separate token types (device, session, relay) to limit exposure if any single token is compromised. Stolen token detection automatically invalidates suspicious sessions.
Data Retention
Account data is retained while your account is active. To delete your ClawTab account, open Settings, Account, Delete account in the mobile app. You can also email [email protected] from your account email address with the subject "Delete my ClawTab account".
Account deletion removes your relay profile, sign-in tokens, paired device registrations, push tokens, workspace sharing relationships, preferences, and notification history. Local files, jobs, and logs on your host remain under your control. Billing and rental records are handled separately; contact us to request their deletion and confirm any legally required retention.
Third-Party Services
- Apple Push Notification service (APNs) - for iOS push notifications
- Web Push - for browser notifications
Google Analytics provides website, hosted web Remote, and anonymous native app usage measurement.
Open Source
ClawTab is MIT-licensed. The desktop app, relay server, and mobile app source code are all available on GitHub. You can audit exactly what data is collected and how it is handled.
Contact
For privacy questions or data deletion requests, contact us at [email protected] or open an issue on GitHub.