_runheed
Sign in

Privacy Policy

Last updated October 8, 2026

Runheed is operated by Great Work LLC ("we", "us"), 651 N Broad St, Suite 206, Middletown, DE 19709. This policy explains what we collect when you use Runheed at runheed.com, the SDKs and the MCP server, and what we do with it. Questions: hello@greatwork.company.

What we collect

  • Account data: your email address, and the workspace, project and agent-key names you create. We sign you in with one-time email links, so we store no password.
  • Billing data: Stripe processes payments. We store your Stripe customer and subscription ids, plan, billing status and billing email. We never see or store full card numbers.
  • Event data your apps send: error type and message, stack frames, breadcrumbs, environment, release, platform and runtime, agent context (agent name, version, session, action, tool), request method, URL and headers, and any user id, email, IP address or extra fields your code attaches. You control what your code sends. Authorization, cookie and API-key headers are replaced with [REDACTED] when they arrive.
  • Technical data: server logs with IP addresses and request paths, kept for security and debugging for up to 30 days.

How we use it

  • To run the service: store and group your events, show them in the dashboard and return them to your agents through the API and MCP server.
  • To send the emails you expect: sign-in links, new-error alerts, usage notices and billing receipts.
  • To bill you, prevent abuse and keep the service secure.

We do not sell your data, use it for advertising, or use your event data to train AI models.

Service providers

  • Stripe (payments and invoices)
  • Resend (transactional email)
  • DigitalOcean (hosting, United States)

Each processes data only to provide its service to us. When your agent reads events through the MCP server, that data goes to the AI tool you connected, under that tool's own terms.

Retention

Events are deleted automatically after your plan's history window (30, 90 or 180 days), and we keep at most the 100 newest full events per grouped error. Account and billing records are kept while your account is open and afterwards as long as tax and accounting law requires. Ask us at hello@greatwork.company to delete your account and its events at any time.

Your rights

You can ask to access, correct, export or delete your personal data, or object to how we process it. Email hello@greatwork.company and we will answer within 30 days. If you are in the EU, UK or California you have these rights under GDPR, UK GDPR or CCPA, and you may complain to your local data protection authority. If your apps send us data about your own users, you are the controller of that data and we process it on your behalf.

Security

Traffic is encrypted with TLS. Agent keys are stored as SHA-256 hashes. The service runs on a hardened server with per-app isolation, and access is limited to the people who operate it.

Children

Runheed is a developer tool for people 18 and older. We do not knowingly collect data from children.

Changes

We will post changes here and update the date above. For material changes we will email account owners before they take effect.