Privacy policy

Who we are

Runqora is made and run by jeantkg, an independent developer in Antigua and Barbuda (“we”), who decides how the data described here is used. Reach us at @jeantkg on X about anything on this page.

What we store

• Your account: your name, email address, an optional picture and a hash of your password. We never store the password itself.
• Your organizations: their names, members, roles, invitations, projects and settings.
• What you set up in a project: API keys (only a hash and the first characters), webhook endpoints and the events you send, the addresses you monitor and their results, and the credentials for the services you connect. Those credentials are encrypted (AES-256-GCM) and are never shown again once saved.
• Activity: the audit log of changes in your organization, and, for each session and audit entry, the IP address and browser it came from.
• Billing: your organization's plan and subscription status. Card details go to our payment provider and never reach us.

Your users and your files

When you connect your authentication system or a storage bucket, Runqora reads from it when you open the matching page, and changes it when you ask, such as banning a user or deleting a file. It does not keep copies of your users or your files. Uploads go from the browser straight to your bucket. For that data you remain the controller and we act on your instructions.

Why we use it

• To provide the service you signed up for.
• To keep it secure: limiting sign-in attempts, recording who changed what, and investigating abuse.
• To send the email the service needs: verification, password resets, invitations and the alerts you set up. We do not send marketing email.
• To bill paid plans.

Who processes it for us

• Hetzner, which hosts our servers.
• Cloudflare, which carries traffic to and from them.
• Neon, which runs our database.
• Resend, which delivers our email.
• Dodo Payments, which sells paid plans to you as merchant of record and handles payment details.

Some of them process data outside your country, including in the United States. We share data with no one else, and we do not sell it.

Cookies

We use a cookie to keep you signed in and another to reopen the organization you used last. Your theme choice is kept in your browser. There are no advertising or analytics cookies, so there is nothing to consent to.

How long we keep it

• Uptime checks, cron heartbeats and alerts: 30 days, then deleted.
• Webhook deliveries and the audit log: until the project or organization they belong to is deleted.
• Everything else: until you delete it, or your account. Deletion removes it from the service at once; copies in our database provider's backups disappear when those backups expire.

Your rights

You can see and change your account in its settings, and delete your organizations and your account there too. To get a copy of your data, have something corrected or erased, or object to how we use it, contact us at @jeantkg on X. You may also complain to your data protection authority.

Changes

When this policy changes, the date at the top changes with it. We will email account holders before a change that affects how their data is used.