Privacy Policy — Netrun
1. General provisions
1.1. This Privacy Policy (hereinafter — the “Policy”) defines the procedure for processing and protecting the personal data of users of the Netrun service.
1.2. The operator of personal data is the administration of the Netrun service (hereinafter — the “Operator”, “we”).
1.3. The Policy applies to the processing of data carried out through the Netrun website and application (the personal account, project deployment, billing), as well as through the support channels.
1.4. By starting to use the service, the User confirms that they have read the Policy. If you disagree with its terms, you should stop using the service.
2. Key concepts
Website / service — the Internet resource and software of Netrun through which access to the platform is provided.
Personal data — any information relating to a directly or indirectly identified individual.
Processing of personal data — actions with data: collection, recording, storage, use, transfer, depersonalisation, blocking, destruction, etc.
User — a person who has registered with the service or uses its features.
3. Composition of the processed personal data
3.1. As part of providing services, the Operator may process:
- the email address and the account identifier in the system;
- the name (display name), if the User has specified it in the profile;
- data about projects: names, statuses, technical metadata required for deployment and display in the interface;
- information about payments and balance to the extent necessary for billing;
- the IP address and information about the device/browser (User-Agent) when accessing the website — for security, debugging and protection against abuse;
- the content of support requests and correspondence on the User’s requests.
3.2. Passwords are stored as a cryptographic fingerprint (a hash); the Operator does not store the password in plain text. Bank card payment details, if used, are processed by authorised payment providers in accordance with their rules.
3.3. The source code and project files are processed as data necessary for the performance of the service agreement on hosting the application; access to them is restricted by technical and organisational measures.
4. Purposes of processing personal data
4.1. Data is processed for:
- registration and authentication of the User;
- providing access to the platform’s features and deploying projects;
- billing, balance accounting and execution of payment operations;
- technical support, notifications about the status of services, incidents and changes in the operation of the service;
- compliance with the requirements of the law and consideration of justified requests from authorised bodies.
5. Legal grounds for processing
5.1. Processing is carried out on the following grounds:
- the consent of the data subject — when explicit consent is requested;
- performance of the agreement with the User — for the operation of the service and billing;
- the legitimate interests of the Operator — within limits that do not violate the User’s rights (security, analytics of aggregated metrics);
- fulfilment of obligations provided for by law.
6. Transfer of personal data to third parties
6.1. The Operator does not sell personal data and does not transfer it to third parties for commercial purposes, except in the cases specified in this Policy or when the transfer is necessary for the operation of the service.
6.2. Access to data within the organisation is limited to employees and contractors who need it to support the service, under confidentiality obligations.
6.3. To accept payments and reconcile transactions, the Operator may use payment and financial services. Such operators independently determine the scope of the data processed within the framework of their policies.
6.4. Data may be transferred to authorised bodies on the grounds and in the manner established by law.
7. Storage of personal data
7.1. Data is stored on secure servers using technical and organisational measures aimed at preventing unauthorised access.
8. Storage periods
8.1. Personal data is stored for the period of use of the service and a reasonable period after the deletion of the account or the termination of the relationship — for the fulfilment of obligations, the resolution of disputes and compliance with the requirements of the law.
8.2. Upon expiry of the period, the data is subject to deletion or depersonalisation, unless otherwise required by law.
9. Measures to protect personal data
9.1. The following measures are applied: restriction of access; use of secure channels (HTTPS); role separation; monitoring of incidents within reasonable limits.
10. Rights of the personal data subject
10.1. The User has the right to request information about the processing, demand the clarification or deletion of data in the cases provided for by law, withdraw consent (if the processing is based on it) and appeal against the Operator’s actions to an authorised body or court.
10.2. To exercise their rights, the User applies through the support contacts specified on the Netrun website. The response time is up to 30 calendar days, unless otherwise prescribed by law.
11. Final provisions
11.1. The Policy is valid until it is replaced by a new version.
11.2. The Operator has the right to change the Policy. The current version is published on the website. Continued use of the service after publication may mean agreement with the new version to the extent that does not require separate explicit consent under the law.
11.3. The terms of use of the service are set out in the Terms of Service.
11.4. For questions about data processing, write to technical support: netrun872@gmail.com.