Privacy Policy

Last Updated: September 17, 2026 · Effective for all users globally

RuntimeForce ("we", "our", or "us") operates the website https://runtimeforce.dev and the open-source client application RuntimeForce IDE. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

1. Merchant of Record & Payments

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record (MoR) for all our orders. Paddle provides all customer service inquiries and handles returns, VAT/sales tax compliance, and payment processing. We do not collect, process, or store your credit card, debit card, or payment method credentials on RuntimeForce servers. Payment transactions are governed by Paddle's Privacy Policy (https://www.paddle.com/legal/privacy).

2. Zero Trust & Data Sovereignty Principles

RuntimeForce is architected under strict Local-First and Zero Trust principles:

Source Code & Files: Your project files, source code, and local workspaces reside solely on your machine or private SSH host. They are never uploaded, cached, or used to train artificial intelligence models.
Credentials & Keys: SSH passwords, private keys, Git Personal Access Tokens (PAT), and personal API keys (BYOK) are stored strictly locally in your private SQLite database under AES-256-GCM encryption.
Conversation History: Full prompt history, terminal inputs, outputs, and agent traces stay on your local disk.

3. Data We Collect on the Server

We only collect minimal technical data required to maintain your subscription and manage cloud quotas:

Account Information: Email address, user ID, and profile avatar received via OAuth (Google, GitHub, X.com, or Reddit).
Subscription Status: Subscription tier (Free, Pro, Studio, Enterprise), customer identifier issued by Paddle, subscription status (active, past_due, canceled).
Usage Metrics: Number of monthly AI Credits consumed on managed cloud proxies to enforce plan limits. We do not store the prompt texts or completions on server storage.

4. Legal Basis for Processing (GDPR / UK GDPR)

We process personal data on the following legal grounds:

Performance of a Contract: To provide access to paid subscription tiers, AI credit ledgers, and authentication services.
Legitimate Interests: To prevent fraud, protect infrastructure security, and debug server health.
Legal Compliance: To comply with financial and tax accounting requirements.

5. Your Data Protection Rights

Depending on your location, you have the right to access, rectify, port, or request erasure of your personal data. You may also object to processing or withdraw consent at any time.

To exercise any of these rights, contact us at: privacy@runtimeforce.dev.

6. Contact Information

RuntimeForce
Individual Entrepreneur (IT Small Business Registry), Georgia
Email: privacy@runtimeforce.dev
Billing queries: billing@runtimeforce.dev