Effective date: July 10, 2026
RecruiterClaw LLC ("we," "us") provides an AI-powered recruiting assistant that runs locally on your computer. This policy explains what data RecruiterClaw accesses, how it is used, and most importantly, where it lives.
What RecruiterClaw accesses, and why
When you connect your accounts during installation, you grant RecruiterClaw specific, limited permissions:
- Email (Google Gmail or Microsoft Outlook). Read access, to prepare briefings and surface important messages. Draft and send capability only if you enable Email Actions, and every send requires your explicit confirmation. RecruiterClaw cannot delete email. On Google, we never request deletion permission, so deletion is impossible at Google's own permission layer. On Microsoft, our software contains no deletion capability by design.
- Calendar (Google Calendar or Microsoft 365). Read access for briefings and meeting preparation; event creation/editing only if you enable Calendar Actions, with your confirmation. RecruiterClaw does not delete calendar events.
- Google Drive (optional). Per-file access only: RecruiterClaw can create documents (for example, a candidate dossier you request) and can only ever see or edit files it created itself. It cannot browse, read, or modify your existing Drive files.
- Your ATS (for example, Loxo). Read and write access via your API key to search candidates, log activity, and update records you direct it to update. RecruiterClaw never deletes ATS records.
- Slack. RecruiterClaw communicates with you through a bot in your own Slack workspace.
Where your data is stored
- Credentials (OAuth tokens, API keys) are stored in the macOS Keychain on your computer, encrypted by your operating system. They are not transmitted to us.
- Working data (briefings, preferences, profiles) is stored in files on your computer.
- AI processing happens through your own AI subscription (such as Claude or ChatGPT) under that provider's terms and privacy policy. Content necessary to complete a task you request (for example, an email thread you ask to be summarized) is sent to your AI provider for processing.
- We do not sell your data. We do not use your data for advertising. We do not train models on your data.
What we (the company) actually receive
Operational telemetry only: install health signals and error events (for example, "the morning briefing failed to run"), so we can support you. These do not contain your email or calendar content.
Google API Services disclosure
RecruiterClaw's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above, is not transferred to third parties except as necessary to provide those features (your own AI provider, at your direction), is not used for advertising, and is not used to train generalized AI models.
Revoking access
You are always in control:
- Google: myaccount.google.com → Security → Third-party apps with account access → RecruiterClaw → Remove access.
- Microsoft: myapps.microsoft.com → RecruiterClaw → Revoke.
- Or uninstall RecruiterClaw and delete its folder. Credentials in your keychain can be removed via Keychain Access.
Data retention
Because your data lives on your machine, retention is under your control. Uninstalling removes the working data; revoking access invalidates the credentials.
Changes to this policy
We will post updates to this page and note the effective date above. Material changes will be communicated to active customers directly.
Contact
RecruiterClaw LLC
Questions about this policy or your data: jordan@recruiterclaw.ai