Protection of Personal Data
What we collect
Account data (name, email, hashed password), workspace configuration, generated site content, translations, and billing metadata processed by Stripe. We never sell personal data and never use your content to train models.
How we protect it
Passwords are hashed with bcrypt. All traffic is encrypted in transit (TLS 1.2+) and data is encrypted at rest. Access follows zero-trust role-based control with workspace-level isolation, rate limiting, and full audit logging of security-relevant events.
Your rights
Depending on your region you may access, correct, export, or delete your personal data, and object to or restrict processing. Email legal@runia.io and we will respond within 30 days (GDPR/LGPD) or 45 days (CCPA).
Data retention
Workspace data is retained while your account is active. After deletion requests, personal data is purged from production systems within 30 days and from encrypted backups within 90 days.