Legal
Privacy Policy
Last updated 2026-11-09
runner runs your code in isolated virtual machines. This page explains what data we handle to do that, in plain words.
"runner", "we" and "us" mean the operator of runner.so and the runner service. runner is the controller of your personal data. "You" means anyone who uses the service or this website. runner is in early access and this policy covers both.
What we collect
Account and sign-in
Your email address, your name if your sign-in provides one, and your sign-in identity from GitHub or Google if you use them. We do not use the GitHub or Google access tokens for anything and we keep them unreadable at rest.
Usage and billing records
- Which sandboxes you create, start, stop and delete, their size, and how many seconds they run.
- Your wallet, top-ups, plan, invoices and the usage we charged.
- Counts of requests and tokens that pass through the credential proxy, per sandbox and provider.
- A history of each sandbox's state changes and commands.
Sandbox contents
Your sandbox holds your code, files and anything your agents produce. We process it only to run the sandbox for you: to start it, snapshot its disk, store the snapshot, restore it and delete it. We do not read it for any other purpose. If you turn on the credential proxy, API keys you give us are held on our hosts so we can add them to your requests. Two account switches limit what we keep: "Zero data retention" erases a sandbox's disk when it stops, and "No agent logs" keeps agents' request and response bodies out of our storage and logs.
Messages to us
If you email support@runner.so or ask for early access, we keep your message and your email address so we can reply.
Website visits
This website uses a self-hosted, cookieless analytics tool (Umami) to count page views. It sets no cookies and collects no personal data. It runs on our own servers and nothing goes to an advertising network.
Why we use it
- To provide the service: sign you in, run sandboxes, keep snapshots, bill you.
- To keep the service safe: stop abuse, fraud and attacks, and enforce the Terms of Service.
- To support you and to tell you about changes that affect your account.
- To meet legal duties, such as tax and accounting rules.
We do not sell personal data. We do not use your sandbox contents to train models.
Who else handles it
We use a small set of providers to run runner. They process data on our behalf, only for the purpose given.
- Dodo Payments is our payment provider and merchant of record. It takes your payment details, charges your card, handles sales tax and VAT, and sends receipts. Your card statement names Dodo. We do not receive or store your full card number. Dodo handles its own data under its own privacy policy.
- Hosting providers. Our sandboxes run on dedicated servers we rent. Today these are from OVH. Your sandbox's disk and memory live on these servers while it runs.
- Cloudflare R2 is the object storage where we keep snapshots and the images that sandboxes start from.
- Cloudflare Email Routing receives and forwards the mail you send to our support and early-access addresses.
- Resend is our outbound mail relay. It sends account emails, such as wallet and billing alerts.
- Control plane host. Our control plane (the API, dashboard and database), which holds account and billing records, runs on a virtual private server rented from Leaseweb and managed with Coolify.
- GitHub and Google confirm who you are when you choose to sign in with them.
We may also share data when the law requires it, or to protect people from serious harm. If we add a provider that handles personal data, we will update this list.
How long we keep it
- Automatic snapshots expire after 24 hours, and we keep the latest one. A snapshot you save by name stays until you delete it.
- Sandbox history: lifecycle events (starts, stops, state changes) are kept for 30 days, and command output for 7 days.
- A stopped sandbox's disk stays until you delete the sandbox. If your wallet is empty, saved snapshots past your plan's included count are deleted after 7 days.
- Account data stays while your account is open. When you ask us to delete your account, we delete your sandboxes, snapshots and profile within 30 days.
- Billing records stay as long as tax and accounting law requires, even after you delete your account.
- Operational logs stay only as long as we need them to run, secure and fix the service.
- Messages to us stay as long as we need them to help you.
Your choices
You can ask us to show you the personal data we hold about you, correct it, export it or delete it. Write to support@runner.so. We may need to confirm it is you. Depending on where you live, you may also have the right to object to some uses and to complain to your data protection authority.
Security
Each sandbox runs in its own virtual machine, and the rules that limit it run on the host. Read the details on our Security page. No service is perfectly secure. If we learn of a breach that affects your personal data, we will tell you as the law requires.
Where data is processed
Our providers run servers in several countries, so your data may be processed outside the country you live in.
Children
runner is for developers and is not meant for anyone under 18. We do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will update the date at the top and email account holders.
Contact
Questions or requests: support@runner.so.