Privacy Policy
RuntimeForce ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our local-first AI orchestration platform.
1. Our Privacy-First Architecture
RuntimeForce is built on a Zero Trust, local-first architecture. This fundamentally limits what data we can ever access:
- Your source code never leaves your machine.
- SSH credentials (passwords, private keys) are encrypted with AES-256-GCM and stored only in your local SQLite database.
- Git tokens (personal access tokens) remain on your device.
- Chat history and context are stored locally, not on our servers.
- File system contents are never uploaded to RuntimeForce infrastructure.
2. Information We Collect
We collect only the minimum data required to operate the service:
2.1 Account Information
- Email address (provided by you or via GitHub/Google OAuth)
- Account creation timestamp
- Subscription tier (Free, Pro, Studio, Enterprise)
2.2 Billing Information
Payment processing is handled by Paddle, our Merchant of Record. We do not store, process, or see your credit card details. Paddle collects billing information according to their own privacy policy.
2.3 Usage Metrics
For paid plans only, we track:
- Token usage counts (not content)
- API call frequency to our stateless proxy
- Subscription status events
We do not log prompts, responses, file paths, or code snippets.
3. How We Use Your Information
- Authenticate your identity and manage your account
- Validate subscription status for Pro/Studio/Enterprise features
- Enforce token limits on paid plans
- Send transactional emails (receipts, security alerts)
- Respond to your support requests
4. AI Proxy and Data Transit
When you use our cloud AI proxy (paid plans), your requests pass through our stateless gateway:
- Requests are forwarded to LLM providers (OpenAI, Anthropic, etc.) without logging
- No request bodies or response bodies are stored on our servers
- Only metadata (timestamps, token counts) is retained for billing
5. Third-Party Services
- Paddle — billing and tax compliance (Merchant of Record)
- GitHub / Google — OAuth authentication (when you choose these options)
- LLM providers — OpenAI, Anthropic, Google, etc. (only when you use the cloud proxy)
6. Data Retention
- Account data: retained while your account is active
- Billing records: retained for 7 years per tax compliance
- Usage metrics: retained for 90 days, then anonymized
7. Your Rights (GDPR / CCPA)
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion
- Export your data in a portable format
- Withdraw consent at any time
To exercise these rights, contact privacy@runtimeforce.dev.
8. Security
We implement industry-standard security measures including TLS 1.3 for all connections, bcrypt for password hashing, JWT for session management, and AES-256-GCM for local credential encryption.
9. Children's Privacy
RuntimeForce is not intended for users under 16. We do not knowingly collect data from children.
10. Changes to This Policy
We will notify you of material changes via email or an in-app notice at least 30 days before they take effect.
11. Contact
For privacy-related questions: privacy@runtimeforce.dev