Privacy Policy — Runtimez

The short version. The Runtimez agent runs with read-only access inside your cluster. It reads workload metadata — names, images, API versions, resource settings, and the findings it derives from them. It does not read Secret values, ConfigMap contents, environment-variable values, application logs, or customer data. Nothing about your workloads is required to leave your cluster for you to get value. We use the contact details you give us only to help you connect and to support your account.

1.Who we are

Runtimez ("Runtimez", "we", "us", or "our") provides read-only Kubernetes deployment intelligence and production-readiness analysis. This Privacy Policy describes how we collect, use, and protect information in connection with our website (runtimez.io), our agent, and related services (together, the "Service"). Questions? Email hello@runtimez.io.

2.Information we collect

Information you give us

When you join the waitlist, book a call, request an audit, or contact us, we collect the details you choose to provide — typically your name, work email, company, and anything you include in your message. If you become a paying customer, we (or our payment processor) collect billing information.

Cluster metadata collected by the agent

When you install the read-only agent, it inventories your cluster to produce risk findings. This metadata may include:

Workload names, namespaces, labels, and owner references;
Container image references and tags (not image contents);
Kubernetes and API versions, and deprecated/removed API usage;
Resource configuration — replicas, probes, requests/limits, disruption budgets, and similar readiness signals;
Vulnerability (CVE) identifiers associated with the images you run;
Derived risk scores, upgrade blockers, and cost estimates.

Information collected automatically on our website

Like most sites, we collect basic technical data (IP address, browser type, pages viewed, referring URL) to keep the site secure and understand usage. We keep this minimal.

3.What we do not collect or access

By design, the agent does not read, transmit, or store:

Secret values, credentials, tokens, or certificate private keys;
Environment-variable values or ConfigMap contents;
Application data, database contents, or customer PII processed by your workloads;
Application logs or in-memory data.

Secret values and image contents never leave your cluster. The agent requests only read (get/list/watch) permissions and never mutates cluster state.

4.How we use information

To provide the Service — generate and display your risk findings, correlations, and reports;
To help you connect a cluster and to provide support;
To communicate with you about your account, audits, and product updates you asked for;
To improve, secure, and troubleshoot the Service;
To meet legal, tax, and accounting obligations.

We do not sell your personal information, and we do not use your cluster metadata to train third-party models.

5.How we share information

We share information only with:

Service providers (subprocessors) that host and operate our infrastructure, deliver email, and process payments, under contracts that require them to protect your data;
Legal and safety recipients when required by law or to protect our rights, users, or the public;
A successor in the context of a merger, acquisition, or asset sale, subject to this policy.

6.Data storage & security

We host the Service on established cloud infrastructure and apply administrative, technical, and organizational safeguards appropriate to the sensitivity of the data — encryption in transit, access controls, and least-privilege principles. No method of transmission or storage is perfectly secure, but the read-only, metadata-only design of the agent limits exposure by default.

7.Data retention

We keep information for as long as needed to provide the Service and for legitimate business or legal purposes. You can ask us to delete your account data at any time; when you uninstall the agent, it stops collecting from your cluster immediately.

8.Cookies

Our website uses a small number of cookies and similar technologies for essential functionality and basic, privacy-respecting analytics. You can control cookies through your browser settings. Our scheduling tool (Calendly) may set its own cookies when you book a call.

9.Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, email hello@runtimez.io and we'll respond within the timeframe required by applicable law.

10.International transfers

We may process information in countries other than your own. Where we do, we take steps to ensure your information receives an adequate level of protection consistent with this policy and applicable law.

11.Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

12.Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

13.Contact

Questions, requests, or concerns about privacy? Email hello@runtimez.io. See also our Terms of Service.

This policy is provided for transparency and is not legal advice. Runtimez is in early access; we'll keep this page current as the Service evolves.