Privacy Policy
RooNow (ABN 48 329 849 768), trading as RunMac, handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We serve customers worldwide; section 6 sets out additional rights for customers in the EEA/UK, California and other regions.
1. What we collect
- Account and contact: your name, email, country, and (for business customers) business details.
- Verification: identity or business-verification information (for example a government-issued ID or business registration) and a payment-method check at signup, to prevent fraud and meet our obligations.
- Billing: processed by Stripe. We receive limited transaction details such as the last four digits of your card. We do not store your full card number.
- Access metadata: connection details needed to give you access, such as the IP addresses you connect from and the SSH key fingerprints you provide.
- Aggregate device usage: an agent on your Mac reports, roughly every few minutes, only: CPU %, memory %, free disk (GB), network throughput totals (kbps), and a count of open sessions, plus the Mac's serial number and agent version.
- Waitlist: if you ask to be notified when a Mac is available, your email address, the model you chose, and a hash of your IP address (used only for rate limiting).
- Support: emails and messages you send us.
2. What we do not collect or access
We do not read, copy, scan or back up the contents of your Mac. The usage agent does not collect your files, file names or paths, the names of programs you run, your commands, your keystrokes, screen contents, or network payloads. We access the Mac's operating system (not your data) only when needed to provision, support, maintain or wipe it.
3. Why we collect it
- To provide and bill the service, give you access, and support you.
- To verify identity, screen against sanctions lists, and prevent fraud and abuse.
- For capacity planning and abuse prevention (the aggregate usage metrics, for example spotting a hung or overloaded Mac, or sustained use that breaches the Acceptable Use Policy).
- To tell you when a Mac is available, if you asked us to.
- To meet legal obligations.
4. Disclosure
We share personal information with service providers only as needed to run RunMac: Stripe (payments and tax), SimpleMDM (device management), Apple (device enrolment and Apple Business Manager), and Cloudflare (hosting, DNS, access and email delivery). We may disclose information where required by law, or to protect our rights, the fleet, or others' safety. We do not sell your personal information.
5. Where your data is processed
RunMac is based in Australia and uses providers (Stripe, SimpleMDM, Cloudflare) that store or process data outside Australia, including in the United States and other countries. Wherever you are, your information will be processed in these locations. We take reasonable steps to ensure our providers handle it consistently with the APPs and, where applicable, use appropriate transfer safeguards such as their standard contractual clauses.
6. International customers (EEA/UK, California and elsewhere)
- EEA / UK (GDPR / UK GDPR): our legal bases are performance of our contract with you, our legitimate interests (operating and securing the fleet and preventing abuse), and compliance with legal obligations. You have rights to access, correct, delete, restrict, port and object to processing of your data, and to lodge a complaint with your local data-protection authority. Cross-border transfers rely on appropriate safeguards.
- California (CCPA/CPRA): we do not sell or "share" your personal information. You may request access to or deletion of your information and will not be treated differently for exercising these rights.
- Other regions: if your local law gives you similar rights, contact us and we will help where we reasonably can.
Exercise any of these rights by emailing contact@runmac.dev.
7. Retention
- Aggregate usage metrics are kept for about 30 days, then deleted or aggregated further.
- Data on the Mac is erased between leases via "Erase All Content and Settings".
- Waitlist entries are kept until you unsubscribe or we remove them.
- Account, billing and verification records are kept as long as needed for the service and to meet legal and tax obligations, then deleted or de-identified.
8. Security
We use network isolation, per-Mac firewalls, device management, access controls and reputable providers to protect information. No system is perfectly secure; you also play a part by keeping your credentials safe.
9. Access, correction and complaints
You can ask to access or correct your personal information, or make a privacy complaint, by emailing contact@runmac.dev. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or your local data-protection authority.
10. Changes
We may update this Privacy Policy; the current version is at runmac.dev with its effective date.