Draft, pending legal review. This is a plain-language draft. A lawyer has not reviewed it yet, and it may change before the beta takes payments.
Privacy Policy
Last updated
This policy says what Zerun stores about you, why, and who else handles it. It covers the Zerun service and this website.
What we store
| Data | Where it comes from | Why we store it |
|---|---|---|
| Your GitHub user ID, username and email address | GitHub, when you sign in and install the App | To sign you in and to send balance and cap alerts |
| The App installation and the repos you choose | GitHub | To add runners to those repos and to refuse public repos |
| Job records: repo, job and run IDs, attempt, workflow, job name, event, branch or tag, commit SHA, runner labels, runner name, result and timestamps | GitHub, and the Zerun runner at the start of each job | To charge for each job, to check charges against GitHub's records, and to show your jobs |
| Timings of your recent jobs on GitHub-hosted runners | GitHub | To show how your jobs compare |
| Statistics: the tree hash of a job's checkout, when there is one | The Zerun runner at the end of the job | To study how often a job repeats work that already passed. This never changes how a job runs. |
| Machine records: VM ID, size, zone and lifetime | AWS | To run jobs, to find lost VMs and to check charges |
| Credit, payments and charges | You, and our payment processor | To keep your balance and your billing records |
| A log of actions in your account | The dashboard and the service | To keep an audit trail |
What we never keep
- Step logs and secrets. They go between the runner and GitHub, and Zerun does not receive them.
- Your code. The Zerun GitHub App does not ask for permission to read it. Your code is on the job's VM only while the job runs, and Zerun destroys the VM when the job ends.
- Your card details. Our payment processor collects them, and we never see the card number.
Cookies
The Zerun dashboard sets two cookies, and both are for sign-in. One protects the GitHub sign-in step and expires after 10 minutes. The other keeps you signed in for up to 7 days. This website sets no cookies, has no analytics and loads no third-party scripts.
Who else handles your data
- GitHub, which runs GitHub Actions and the sign-in.
- Amazon Web Services, which hosts Zerun and sends our email. We store data in the AWS Asia Pacific (Sydney) region, ap-southeast-2, in Australia.
- Stripe, which takes card payments.
- Vercel, which hosts this website and keeps its request logs.
We do not sell your data or share it for advertising.
How long we keep it
We keep your data while your account is open. We keep billing records for as long as tax and accounting law requires.
Your choices
You can ask for a copy of your data, or ask us to delete it, at beta@zerun.example. We delete it except for the billing records we must keep. To stop Zerun from receiving new data, follow the steps in Turn Zerun off.
Changes to this policy
We will email you before a change to this policy takes effect.