Privacy Policy

Last Updated: February 28, 2026

1. Introduction

Welcome to RunWatch, a product operated by Cryostack Tech LLC, a Pennsylvania limited liability company ("Company", "we", "us", or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We collect and process the following types of information:

  • Account Information: Name, email address, and organization details
  • CI/CD Metrics: Pipeline runs, job data, and performance metrics from your CI/CD provider
  • Usage Data: How you interact with our service, including pages visited and features used
  • Payment Information: Billing details processed securely through Stripe
  • Technical Data: IP address, browser type, and device information

3. How We Use Your Information

We use your information to:

  • Provide and maintain our CI metrics monitoring service
  • Process your payments and manage your subscription
  • Send you service updates and important notifications
  • Improve our service and develop new features
  • Ensure the security and integrity of our platform
  • Comply with legal obligations
  • Respond to your inquiries and provide customer support
  • Detect, prevent, and address technical issues and security threats

Legal Basis for Processing (EU/UK): We process your personal data based on: (a) your consent; (b) performance of a contract with you; (c) compliance with legal obligations; (d) our legitimate interests in operating and improving our service.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data. Your data is stored securely using industry-standard encryption and is hosted on reputable cloud infrastructure providers that maintain high security standards. Payment processing is handled by PCI DSS compliant payment processors.

5. Data Sharing

We do not sell your personal data. We may share your data with:

  • Service providers who help us operate our platform (e.g. Stripe, Supabase, etc.) under strict confidentiality agreements
  • Law enforcement or regulatory bodies when required by law or to protect our rights
  • Other parties with your explicit consent
  • Business partners in connection with a merger, acquisition, or sale of assets
  • Professional advisors (lawyers, accountants) under confidentiality obligations

International Data Transfers: Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data we hold
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Request limitation of processing in certain circumstances
  • Objection: Object to processing based on legitimate interests
  • Portability: Export your data in a machine-readable format
  • Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  • Lodge Complaints: File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@runwatch.io. We will respond within 30 days (or as required by applicable law).

California Residents (CCPA): You have the right to know what personal information we collect, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience on our site. These help us understand how you use our service and remember your preferences.

Types of Cookies We Use:

  • Essential: Required for the service to function (authentication, security)
  • Functional: Remember your preferences and settings
  • Analytics: Help us understand usage patterns and improve the service

You can control cookies through your browser settings. Disabling certain cookies may affect service functionality.

Do Not Track: We do not currently respond to Do Not Track signals from browsers. We may implement support in the future.

8. Third-Party Services

Our service integrates with:

  • Stripe: For payment processing
  • Supabase: For data storage and authentication
  • SSO Services: For authentication using GitHub, Google, Microsoft, etc.

These services have their own privacy policies, which we encourage you to review.

9. Data Retention and Deletion

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law (e.g., tax records, dispute resolution).

Backup Data: Deleted data may persist in backups for up to 90 days before being permanently removed.

Data Breach Notification: In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by applicable law (e.g., GDPR).

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we learn we have collected personal information from a child under 13, we will delete that information promptly.

For users between 13 and 18 years old, we require parental consent as described in our Terms of Service.

11. Marketing Communications

We may send you marketing communications about our service, new features, or promotional offers. You can opt-out of marketing emails at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Contacting us at privacy@runwatch.io
  • Adjusting your account preferences

Note: We may still send you important service-related communications (e.g., account updates, security alerts) even if you opt-out of marketing communications.

12. Data Controller Information (EU/UK)

For users in the European Union and United Kingdom, Cryostack Tech LLC is the data controller responsible for your personal data. Our contact information is provided in the Contact Us section below.

If you have concerns about our data processing, you have the right to lodge a complaint with your local data protection authority. For EU users, you can find your supervisory authority at https://edpb.europa.eu/about-edpb/board/members_en.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

14. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at:

Company: Cryostack Tech LLC

Email: privacy@runwatch.io