Privacy Policy — Runtimez

The short version. The Runtimez agent runs with read-only access inside your cluster. It reads workload metadata — names, images, API versions, resource settings, and the findings it derives from them. It does not read Secret values, ConfigMap contents, environment-variable values, application logs, or customer data. Nothing about your workloads is required to leave your cluster for you to get value. We use the contact details you give us only to help you connect and to support your account.

1.Who we are

Runtimez ("Runtimez", "we", "us", or "our") provides read-only Kubernetes deployment intelligence and production-readiness analysis. This Privacy Policy describes how we collect, use, and protect information in connection with our website (runtimez.io), our agent, and related services (together, the "Service"). Questions? Email hello@runtimez.io.

2.Information we collect

Information you give us

When you join the waitlist, book a call, request an audit, or contact us, we collect the details you choose to provide — typically your name, work email, company, and anything you include in your message. If you become a paying customer, we (or our payment processor) collect billing information.

Cluster metadata collected by the agent

When you install the read-only agent, it inventories your cluster to produce risk findings. This metadata may include:

Workload names, namespaces, labels, and owner references;
Container image references and tags (not image contents);
Kubernetes and API versions, and deprecated/removed API usage;
Resource configuration — replicas, probes, requests/limits, disruption budgets, and similar readiness signals;
Vulnerability (CVE) identifiers associated with the images you run;
Derived risk scores, upgrade blockers, and cost estimates.

Information collected automatically on our website

Like most sites, our hosting provider logs basic technical data (IP address, browser type, pages requested, referring URL) to keep the site secure. If you accept analytics cookies, Google Analytics also measures how the site is used; see Cookies below. We keep this minimal.

3.What we do not collect or access

By design, the agent does not read, transmit, or store:

Secret values, credentials, tokens, or certificate private keys;
Environment-variable values or ConfigMap contents;
Application data, database contents, or customer PII processed by your workloads;
Application logs or in-memory data.

Secret values and image contents never leave your cluster. The agent requests only read (get/list/watch) permissions and never mutates cluster state.

4.How we use information

To provide the Service — generate and display your risk findings, correlations, and reports;
To help you connect a cluster and to provide support;
To communicate with you about your account, audits, and product updates you asked for;
To improve, secure, and troubleshoot the Service;
To meet legal, tax, and accounting obligations.

We do not sell your personal information, and we do not use your cluster metadata to train third-party models.

5.How we share information

We share information only with:

Service providers (subprocessors) that host and operate our infrastructure, deliver email, and process payments, under contracts that require them to protect your data;
Legal and safety recipients when required by law or to protect our rights, users, or the public;
A successor in the context of a merger, acquisition, or asset sale, subject to this policy.

6.Data storage & security

We host the Service on established cloud infrastructure and apply administrative, technical, and organizational safeguards appropriate to the sensitivity of the data — encryption in transit, access controls, and least-privilege principles. No method of transmission or storage is perfectly secure, but the read-only, metadata-only design of the agent limits exposure by default.

7.Data retention

We keep information for as long as needed to provide the Service and for legitimate business or legal purposes. You can ask us to delete your account data at any time; when you uninstall the agent, it stops collecting from your cluster immediately.

8.Cookies

The first time you visit, our website asks whether you accept analytics cookies. Nothing is set for analytics until you answer, and declining is as easy as accepting. You can change your choice at any time with the Cookie settings link in the footer of every page, or open cookie settings now.

Always on: stored only in your browser

rz-consent remembers whether you accepted or declined analytics, so we don't ask on every page;
rz-theme remembers whether you chose the light or dark theme.

These live in your browser's local storage, not in cookies. They are never sent to us or to anyone else.

Analytics: only if you accept

We use Google Analytics 4, provided by Google, to understand which pages and free tools are useful. If you accept, it sets the _ga and _ga_<id> cookies, which last up to 2 years, and records the pages you view, how you arrived, your device and browser type, your approximate location (country or city, derived from your IP address), and actions on our tools such as running the EKS cost calculator or copying an install command. Google processes this data on our behalf and may transfer it outside your country (see section 10). With your consent we also use Apollo.io website-visitor tracking to see which companies visit the site.

If you decline, or before you choose

Google Analytics doesn't load at all: no cookies are set and nothing about your visit is sent to Google Analytics. If you previously accepted and then decline, we delete the _ga cookies from your browser and stop loading Google Analytics on later pages.

We don't run ads. The advertising signals Google offers (ad storage, ad user data and ad personalization) stay off whatever you choose.

Third parties

Calendly loads when you open the booking window and may set its own cookies, under Calendly's privacy policy;
Google Fonts serves our typefaces. Your browser fetches them from Google, which sees your IP address but sets no cookies.

You can also block or delete cookies in your browser settings. Blocking them won't stop the site from working.

9.Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, email hello@runtimez.io and we'll respond within the timeframe required by applicable law.

10.International transfers

We may process information in countries other than your own. Where we do, we take steps to ensure your information receives an adequate level of protection consistent with this policy and applicable law.

11.Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

12.Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

13.Contact

Questions, requests, or concerns about privacy? Email hello@runtimez.io. See also our Terms of Service.

This policy is provided for transparency and is not legal advice. Runtimez is in early access; we'll keep this page current as the Service evolves.