Privacy Policy

This Privacy Policy explains how run1.dev ("we", "us", or "our") collects, uses, discloses, and safeguards your information when you visit run1.dev (the "Site") or engage our development services (the "Services"). We designed this policy to be short, concrete, and honest about what we do and do not do with your data.

1. Information we collect

We collect the minimum information required to deliver the Services:

• Information you provide through the intake form: the description of your idea and your email address. If you later engage us, we also collect billing details (name, billing address, VAT/tax identifiers where applicable) necessary to issue an invoice.
• Communications: emails or messages you send to us, including attachments.
• Automatically collected data: privacy-first, self-hosted analytics (aggregated page views, referrers, country, and device category). We do not use cookies for tracking, and we do not build cross-site advertising profiles.
• Application-related data provided during delivery: any content, credentials, or assets you share with us so we can build your application. This data is handled under the engagement agreement and deleted from our systems after handover unless you ask us to retain it.

2. How we use the information

• To evaluate whether your idea fits our fixed plan and to send you a scope document.
• To issue invoices, process payments, and keep required financial records.
• To design, build, deploy, and hand over the Services you engaged us for.
• To respond to your inquiries and provide customer support.
• To improve the Site's content and performance using aggregated analytics.
• To comply with legal obligations (tax, accounting, anti-fraud).

3. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (i) performance of a contract to deliver Services you requested; (ii) legitimate interests to operate and improve the Site and to communicate with prospective clients; (iii) legal obligation for tax and accounting records; and (iv) consent where expressly requested.

4. Cookies and tracking

The Site uses no advertising cookies and no cross-site trackers. We may set a single technical preference (such as the theme you selected) stored in your browser's localStorage. Our analytics are self-hosted, cookie-less, and do not identify individual users.

5. How we share information

We do not sell your personal information. We share it only when necessary:

• Service providers and subprocessors that help us operate the business — email infrastructure, hosting, payments — bound by confidentiality obligations and acting only on our instructions.
• Client handover: at the end of an engagement, the application and its infrastructure are transferred to a cloud account that you own. You become the controller of any data thereafter.
• Legal compliance: if required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to equivalent protections.

6. International transfers

We are based in the United States. If you access the Site or use the Services from outside the US, your information may be processed in the US and other jurisdictions. We rely on appropriate safeguards (such as Standard Contractual Clauses) where legally required.

7. Data retention

• Intake form submissions that do not convert into an engagement: retained for up to 12 months, then deleted.
• Engagement records and financial data: retained for 7 years to comply with tax and accounting laws.
• Application source code and credentials we generated on your behalf: transferred on handover and purged from our systems within 30 days, unless you request extended support.

8. Security

We implement reasonable administrative, technical, and physical safeguards — access controls, encryption in transit, and least-privilege credentials. No system is perfectly secure; we cannot guarantee absolute security, but we will notify you of a security incident affecting your personal data without undue delay where required by law.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data; to object to processing based on our legitimate interests; and to withdraw consent at any time. Residents of the European Economic Area and the United Kingdom may also lodge a complaint with their local supervisory authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sharing" for cross-context behavioral advertising (we do not engage in such sharing).

To exercise any right, email us at privacy@run1.dev. We will respond within the timeframe required by applicable law.

10. Children

The Site and Services are intended for business users aged 18 or older. We do not knowingly collect personal information from children.

11. Third-party links

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Review their policies before providing personal data.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top reflects the latest version. Material changes will be announced on the Site.

13. Contact

For privacy questions or to exercise your rights, contact the data controller:

run1.dev
Attn: Privacy
Email: privacy@run1.dev