Privacy Policy

Effective Date: March 27, 2026 · Last Updated: March 27, 2026

Lexaclaw ("we," "us," or "our") is operated by Forcefield. This Privacy Policy explains how we handle information when you use Lexaclaw, our AI-powered compliance assistant for startups.

Our Core Principle: Local-First

Lexaclaw is designed to run locally on your machine. Your corporate documents, company data, and generated legal documents are stored in a local SQLite database on your device. We do not have access to your files, and your documents never leave your machine unless you choose to share them.

Information We Do Not Collect

  • Your documents. Lexaclaw scans and processes your corporate documents entirely on your local machine. We never upload, copy, transmit, or store your files on our servers.
  • Your company data. Information about your company — EIN, state of formation, officers, equity structure — is stored locally in your SQLite database. We do not have access to it.
  • Your generated documents. Board resolutions, NDAs, SAFEs, employment agreements, and other documents generated by Lexaclaw are created and saved locally. We do not receive copies.

Information That May Be Transmitted

  • Compliance rule lookups. Lexaclaw may query our compliance engine to retrieve up-to-date filing rules, deadlines, and requirements for your jurisdiction and entity type. These requests contain general parameters (e.g., state, entity type) — not your company's identifying information or documents.
  • Agent communication. If you use Lexaclaw with the OpenClaw agent framework, the agent communicates with the local Lexaclaw API on your machine. Agent interactions are processed locally.

Anonymous Usage Telemetry

Lexaclaw collects anonymous usage telemetry via PostHog to help us understand how the product is used and improve it. This telemetry is on by default and can be opted out of at any time.

What we collect:

  • A random anonymous install ID (UUID — not tied to your identity)
  • Basic system info (OS, architecture, Node.js version)
  • Feature usage events: company created (entity type and state only), tasks started/completed, documents generated (template name only), chat messages sent (role only — agent or user)
  • API request metadata (HTTP method, anonymized path, response time)
  • Error context (category and truncated message)

What we never collect:

  • Your name, email, or any personally identifying information
  • Company names, EINs, or identifying business data
  • Document content, chat message content, or file contents
  • IP addresses are not stored by our PostHog configuration

How to opt out:

Set TELEMETRY_ENABLED=false in your environment. Telemetry is also automatically disabled in test environments. When you first run Lexaclaw, a console notice informs you that telemetry is active and how to disable it.

Information We May Collect Through Our Website

If you visit lexaclaw.com:

  • Basic analytics. We may use privacy-respecting analytics to understand how visitors find and use our website. We do not use this data to identify individual users.
  • Contact information. If you voluntarily provide your email address (e.g., to join a waitlist or contact us), we store it solely to communicate with you. We do not sell or share email addresses with third parties.

Third-Party Services

  • OpenClaw. Lexaclaw is built on the OpenClaw agent framework. OpenClaw's agent infrastructure operates according to its own terms and privacy practices.
  • Compliance Engine. Our compliance engine is a separate service that provides regulatory rule data. It receives general jurisdiction and entity parameters — not your company's documents or personally identifying information.

Data Security

Because Lexaclaw operates locally on your machine, the security of your data depends primarily on your own device security. We recommend:

  • Keeping your operating system and software up to date
  • Using full-disk encryption
  • Restricting physical access to your device

For data transmitted to our compliance engine, we use HTTPS encryption and bearer token authentication.

Open Source Transparency

Lexaclaw is open source. You can inspect exactly how the software handles your data by reviewing our source code. We believe that when software handles your legal obligations, you should be able to verify what it does.

Children's Privacy

Lexaclaw is designed for business use by startup founders and operators. We do not knowingly collect information from anyone under the age of 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website with a revised "Last Updated" date. Your continued use of Lexaclaw after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: matt@forcefield.so

Website: https://lexaclaw.com