What we collect, why, and what you can ask us to do about it
Privacy policy
How runnerhut collects and processes personal data, the legal bases we rely on, how long we keep it and how to exercise your rights.
Updated 2026-08-14
Who is responsible
Runnerhut BV, Amsterdam, Netherlands is the controller for personal data processed through this website and for account data. Where we run your CI jobs, you are the controller and we are the processor — that relationship is governed by the Data Processing Agreement, not by this policy.
What we process, and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account details (name, email, IdP subject) | Providing the service | Contract (Art. 6(1)(b)) | Life of account + 30 days |
| Billing and usage records | Invoicing, statutory bookkeeping | Contract; legal obligation | 7 years |
| Job telemetry (durations, exit codes, utilisation) | Operating and improving the service | Legitimate interests (Art. 6(1)(f)) | 13 months |
| Job logs | Delivering results, support | Contract | 90 days, configurable |
| Support correspondence | Answering you | Contract; legitimate interests | 24 months |
| Website analytics | Understanding site usage | Consent | 14 months |
What we do not do
- We do not sell personal data
- We do not use your source code or build output to train models
- We do not run advertising trackers on this site
International transfers
On EU-pinned deployments no personal data is transferred outside the EU. On the standard multi-region product, data stays in the region you select; where a transfer would otherwise occur it is governed by Standard Contractual Clauses with a transfer impact assessment.
Your rights
- Access, rectification and erasure of your personal data
- Restriction of, and objection to, processing based on legitimate interests
- Data portability in a structured, machine-readable format
- Withdrawal of consent at any time, without affecting prior processing
- Complaint to your supervisory authority — ours is the Autoriteit Persoonsgegevens (Netherlands)
Requests go to privacy@runnerhut.com and are answered within one month.
Sub-processors
The current list, with location and purpose, is published and versioned. Changes carry 30 days' notice and a right to object.
Your next build could be twice as fast, at half the price
Start free. Migrating away is the same one line, and we publish that diff too.