Third-Party AI Services & Data Notice
HexClaw is local-first. A request is sent to a provider you configure only when you choose a cloud model or use an “Automatic” option that resolves to a cloud model.
1. Scope of this notice
This page explains what happens when HexClaw Desktop routes a request to a third-party AI provider, including chat, semantic indexing, and semantic retrieval. It supplements our Privacy Policy and Terms of Service.
HexClaw is a local-first, open-source client. Distribution of the client alone does not automatically make hexagon-codes the operator or reseller of the provider you choose. Equally, a party's legal role and responsibilities depend on the actual deployment and features provided, and on who determines the purposes and means of processing—not merely on labels such as “tool” or “wrapper.”
2. When HexClaw contacts a provider
| Your choice | What happens |
|---|---|
| Local model | Inference runs in the local runtime configured for the selected service. That model request is not sent to a cloud AI provider. With a self-hosted cloud service, this runtime is on the server. |
| Cloud model | When you start an action, the selected HexClaw service sends the required content to its configured provider endpoint and uses the provider credentials saved by that service. |
| Automatic | The selected service chooses a model using its availability and routing settings. If it selects a cloud model, the corresponding data path applies; the interface shows the model used for the request. |
| Text-only search | Search uses text and the full-text index prepared by the selected service, without calling an embedding provider for that search. The index is on the service machine. |
“Configured” or “available” does not mean data is being transmitted. A network call is normally made only when you submit a request, start or rebuild an index, or run a semantic query. Network conditions, provider queues, rate limits, and quotas can all affect cloud performance.
3. What semantic indexing sends
In the knowledge-base embedding path, the selected HexClaw service extracts and splits documents such as PDFs: on your device for local mode, or on the server for a self-hosted cloud service. A cloud embedding request contains normalized text chunks; a semantic retrieval request contains query text. This embedding request does not include the original PDF file, filename, filesystem path or full-text index database. Ordinary chat attachments follow their own format and input path; the knowledge-base transfer scope does not apply to every attachment.
A text chunk may still contain personal information, confidential material, or other sensitive content. Decide whether that content is suitable for the selected provider before choosing a cloud model. Other capabilities—such as chat, image understanding, or an attachment you actively add—may send prompts, context, images, or attachments as needed and are not covered by the “text chunks only” description above.
4. Information a provider may receive
- Input necessary to perform the selected feature, such as prompts, context, normalized text chunks, query text, or an attachment you actively provide;
- The model name, request parameters, and technical information needed to operate the service; and
- Your API key or other credentials, sent directly to the endpoint you configured.
A provider may also process request logs, account information, and device or network data under its own documentation. Its pricing, availability, data retention, use for model training, processing locations, security measures, and deletion options are governed by the latest terms, privacy notice, and account controls it provides to you.
5. Your choices and controls
- Select an Automatic, local, or cloud model in semantic index settings and check its Local / Cloud label;
- Connect to a local HexClaw service and use a local model or text-only search for material that should stay on your device;
- Remove or replace a provider endpoint and API key in Settings;
- Delete knowledge bases, indexes, or conversations on the selected service. Use the provider's dashboard or rights-request channel for data retained by that provider; and
- Redact and minimize content before sending it, excluding material unrelated to your purpose.
6. Minors and children's personal information
In mainland China, personal information relating to a child under 14 is sensitive personal information. Where that law applies, processing it requires consent from a parent or other guardian and dedicated processing rules, together with a clear and reasonable purpose, data minimization, and appropriate safeguards.
If you are a parent, guardian, teacher, or school administrator, an adult should configure the model and provider. Remove unnecessary names, contact details, health information, identifiers, facial images, and learning records before transmission. A child should never submit an API key or sensitive material directly to an untrusted endpoint.
This page explains product data flows. It is not a substitute for any notice, consent, separate consent, guardian consent, security assessment, or dedicated policy required by law. A deployer or operator must assess its own purposes, users, context, and jurisdictions and adopt appropriate measures.
7. International transfers and processing locations
If your provider endpoint or its infrastructure is outside your country or region, a request may involve an international transfer of personal information. Before enabling it, review the provider's processing locations, subprocessors, data-residency options, and transfer mechanism, and determine whether notice, separate consent, a standard contract, certification, or security assessment is required. HexClaw does not choose a provider's processing location for you.
8. Security and incident response
- Keep API keys only on devices you control; do not share, screenshot, or commit them to a repository;
- Use HTTPS endpoints, rotate credentials, limit permissions, and review provider bills regularly;
- If you detect unexpected usage, revoke the key immediately in the provider dashboard and review local logs and account activity; and
- For a provider outage or data incident, contact that provider as well. For a HexClaw client issue, contact support@hexclaw.net.
9. Service boundaries and statutory rights
Third-party model output can be inaccurate, biased, or unsuitable for a particular purpose. Verify important conclusions and do not rely on unreviewed output for medical, legal, financial, safety, or other high-risk decisions.
Any “as-is” provision in an open-source license and any allocation of liability in a provider's terms apply only to the extent permitted by applicable law. Responsibilities that cannot lawfully be excluded or limited, and the statutory rights of consumers, data subjects, and minors, are not excluded or restricted by this notice.
10. Official references
- Personal Information Protection Law of the People's Republic of China (Chinese)
- Provisions on the Cyber Protection of Children's Personal Information (Chinese)
- Regulations on the Protection of Minors in Cyberspace (Chinese)
- Interim Measures for the Management of Generative AI Services (Chinese)
These references are provided for convenience and are not legal advice for a particular deployment. Consider qualified professional advice for school, healthcare, large-scale personal-information, or international-transfer use cases.
11. Version and changes
Version: 1.0 Effective: 2026-07-19 Last updated: 2026-07-19
We will update this page when model integrations, material data paths, or applicable rules change. Significant product changes will also be noted in the changelog.