Privacy policy
This policy explains what Runcost collects when you use runcost.io, why, and what you can do about it. It is written for the website and for people who contact us. Customers of the Runcost product are covered by their subscription agreement and its data-processing terms as well.
Who we are
Runcost is operated by CloudMigrate L.L.C-FZ, a company registered in the United Arab Emirates. We are the controller of the personal data described here. You can reach us at [email protected].
What we collect on this website
- If you join the mailing list: your work email address, and the fact that you confirmed the subscription from that address.
- If you request a call: your name, work email, company, the monthly cloud spend band you choose, and anything you write in the message field.
- For abuse prevention on those forms: a salted one-way hash of your IP address and browser identifier. The hash cannot be reversed to recover either value; we keep it to spot repeated automated submissions.
- Usage measurement: page views and the actions taken on this site (for example, opening the booking calendar). Our analytics sets no cookies and does not identify you.
Why, and on what basis
- To send you the mailing list you asked for. Basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
- To arrange and prepare for the call you requested, and to follow up on it. Basis: our legitimate interest in responding to a business enquiry you initiated.
- To keep the forms usable by refusing automated submissions. Basis: our legitimate interest in running the site.
- To understand which pages are read and which actions are taken, so the site improves. Basis: our legitimate interest; the data is not personal.
Booking a call
Calls are scheduled through Calendly. When you book, Calendly collects the details you enter under its own privacy policy and shares the booking with us. We see your name, email, the time you chose and the answers to the booking questions.
Who processes data for us
- Microsoft Azure: hosting for the website, the product and the databases.
- Cloudflare: content delivery, security filtering and cookieless web analytics in front of the site.
- Calendly: scheduling calls.
- Azure Communication Services: sending the confirmation email that completes your subscription, the welcome email and the mailing list itself.
- WorkOS: sign-in for customers of the product, including single sign-on with Microsoft Entra ID.
How long we keep it
- Mailing-list data: until you unsubscribe, after which your address is removed from the list and kept only on a suppression list so we do not email you again.
- Call requests: up to 24 months after our last contact with you, unless you become a customer, in which case the customer agreement applies.
- Abuse-prevention hashes: 90 days.
Your rights
Wherever you are, you can ask what we hold about you, ask us to correct or delete it, object to our use of it, or ask for it in a portable form. Write to [email protected] and we will respond within one month. If you are in the United Kingdom or the European Union, UK GDPR or the GDPR applies to our use of your data and you can also complain to your supervisory authority, for the UK the Information Commissioner's Office at ico.org.uk.
International transfers
We are established in the United Arab Emirates and our processors operate in the United Kingdom, the European Union and the United States. Where data leaves the UK or the EU, transfers rely on the UK International Data Transfer Agreement, the EU standard contractual clauses or an adequacy decision.
Changes
When this policy changes we update the date at the top of the page. If a change affects how we use data you have already given us, we tell mailing-list subscribers by email.