1. Scope of this notice
This notice applies to personal data processing when you visit runnervps.com, use our contact process, create or manage a RunnerVPS account, place a Cloud Mac order, manage a dedicated physical node, or interact with our support team through the console.
This notice covers direct interactions on our website and console and throughout service delivery. It also covers the backend processing needed for device configuration, node allocation, payment confirmation, access support, and security troubleshooting. Information you voluntarily submit through independent third-party services may also be subject to that provider’s own policies.
RunnerVPS provides Apple Silicon dedicated physical machine rentals, not virtual machines. You are responsible for managing code, build artifacts, certificates, project files, and other business data stored on your rented device. We access such content only when you voluntarily provide support materials or when it is genuinely necessary for troubleshooting.
2. Information we collect
Account data includes your email address, account status, verification records, and necessary security settings, used to identify your account and complete sign-in. Contact details include the name and email address you provide, as well as the request type, target region, planned rental term, and issue description entered in a contact request.
Order and device data includes the selected model, rental term, node, add-ons, order status, payment status, device identifiers, access status, and delivery records. Support records may include ticket content, when an issue occurred, reproduction steps, sanitized logs you provide, and handling notes created to investigate the issue.
Access and security logs may record access times, request results, network addresses, browser or client type, session status, authentication events, and signals of unusual activity. We may also process attachments, feedback, purchasing information, or security reports you send. Do not submit passwords, private keys, or complete payment credentials.
3. How we use information
We use account and contact data to identify you, manage your account, send service notices, and respond to requests. Order, device, and configuration data help us confirm your selected plan, assign a node, deliver the device, record rental status, and let you view and manage the service in the console.
Support records and necessary technical logs help us address connection issues, device access problems, order assistance, and security incidents. Security signals help prevent unauthorized access, detect abuse, protect accounts and infrastructure, and maintain the integrity of service records.
Where applicable, we also use relevant information to meet compliance recordkeeping obligations, handle disputes, improve ordering and support workflows, and assess whether features work as intended. Data used for product improvement is, where possible, aggregated, de-identified, or processed to reduce identifiability.
4. Payment information
All orders are settled in US dollars (USD). You may choose USDT-TRC20 or Visa, Mastercard, or Amex card payments processed by Stripe. The payment gateways actually available are shown in real time in the console.
For USDT-TRC20 payments, we process the order identifier, payment status, amount, and on-chain transaction reference needed to confirm the transaction. For card payments, Stripe processes card numbers and related payment credentials through its payment flow. We receive the transaction status and reference information needed to complete orders, reconcile payments, process refunds, or handle disputes.
Do not send complete card details, wallet keys, passwords, or other authentication secrets by ordinary email, contact message, or support ticket. If payment status needs to be checked, provide only the order number, transaction reference, and a description that contains no sensitive credentials.
5. Data sharing
We disclose information to service providers responsible for the relevant functions only when necessary for service delivery, payment processing, security, infrastructure operations, or compliance with legal requirements. Disclosures are limited to the data needed for the specific task; we do not sell personal data for purposes unrelated to the service.
Payment-related data enters the corresponding USDT-TRC20 or card payment flow selected by you. Infrastructure and security providers may process necessary access logs, device identifiers, or unusual-activity signals to support network operations, attack prevention, troubleshooting, and account security.
When legally required to respond to a valid request, we provide information within the applicable process and necessary scope. In the event of a reorganization, asset transfer, or change in operating entity, relevant data may transfer with the service relationship and remain subject to protections consistent with this notice.
6. Data retention
Account data is generally retained while the account relationship continues so you can sign in, manage orders, and receive support. Order, payment status, device delivery, and related records are retained for as long as needed to provide services, reconcile finances, handle disputes, and meet legal obligations.
Support records and security logs are retained based on the nature of the issue, investigation needs, level of risk, and system operation requirements. Records involving security incidents, abuse investigations, or unresolved disputes may be kept for a reasonable period after the matter ends to preserve a complete handling history.
When information is no longer needed for its stated purpose, the account relationship, a security investigation, or a legal obligation, we delete, aggregate, or de-identify it according to applicable procedures. Backup copies may remain temporarily within the established rotation cycle and are removed through normal overwrite processes.
7. Cross-region processing and security
Personal data may be processed in different regions due to node delivery, support collaboration, and infrastructure arrangements. Processing locations may differ from your location or selected physical node. We limit processing based on the data’s purpose, access needs, and how the service operates.
We use reasonable access controls, authentication, separation of permissions, logging, and transmission safeguards to reduce the risks of unauthorized access, disclosure, alteration, or loss. Only personnel and service providers who need access for device delivery, order processing, support, or security responsibilities should receive access within the appropriate scope.
You should also protect your account email, sign-in credentials, and SSH private keys, use unique keys and strong passwords, and promptly revoke team access that is no longer needed. If you detect unusual sign-ins, device access, or suspected data exposure, submit a ticket through the console or email support@runnervps.com.
8. User requests and updates
You may request access to, correction or deletion of your personal data, or make other requests available under applicable law. For requests related to a specific account, order, or device, sign in to the console and submit a ticket. If you cannot sign in or have a general question, email support@runnervps.com.
To prevent information from being obtained or changed by an unauthorized person, we may ask the requester for necessary account-related information to verify their identity. Requests should identify the account, information type, and requested action, but must not include passwords, private keys, or complete payment credentials.
We may update this notice when services or processing procedures change or when required by law. We will communicate material updates through the website, console notifications, or contact details associated with your account in a reasonable manner, and update the version and effective date on this page.
This notice is governed by the laws of the jurisdiction where the platform’s operating entity is based. Disputes arising from this notice that cannot be resolved through negotiation may be submitted to a court with jurisdiction in that jurisdiction.