Privacy Policy

Last updated: 18 June 2026

1. Who we are

Rerun is operated by Reunit SA, a société anonyme incorporated in Luxembourg, with its registered office at 177 Rue de Luxembourg, L-8077 Bertrange, Grand Duchy of Luxembourg. In this policy, "Rerun", "we", "us" and "our" refer to Reunit SA.

This policy explains what personal data we collect when you use the Rerun website (https://rerun.build) and the Rerun service, why we collect it, and the rights you have over it. For questions about this policy or your data, contact us at help@rerun.build.

2. Our role under data protection law

For your account, billing and website data, Reunit SA is the data controller.

For the content your agents process when they run on Rerun's cloud infrastructure, Reunit SA acts as a processor on your behalf. That processing is governed by our Data Processing Agreement. If you run Rerun in self-hosted mode (Scale plan), your agents run on your own servers and that content never reaches us.

We have not appointed a separate Data Protection Officer. The controller for the purposes of the GDPR is Reunit SA, and all data-subject requests go to help@rerun.build.

3. Data we collect

Account data. Your name, email address and authentication details when you create and use a Rerun account.
Billing data. Information needed to process payments and manage your subscription. Card details are handled by our payment provider and are not stored on our systems.
Usage and device data. Basic technical information such as IP address, browser type and pages visited, collected when you use the website and the dashboard.
Support and communications. Any information you send us when you contact help@rerun.build.
Customer content. Data that your agents read, generate or pass to connected services while running a mission. When agents run on Rerun cloud, we process this content as a processor on your behalf (see the Data Processing Agreement). In self-hosted mode, this content stays on your infrastructure.

We do not store your third-party service secrets or credentials in our database.

4. How we use your data and our legal bases

We use personal data to:

Provide, operate and maintain the Rerun service (performance of our contract with you).
Process payments and manage subscriptions (performance of our contract, and compliance with legal obligations).
Communicate with you about your account, security and support requests (performance of our contract, and our legitimate interest in supporting and securing the service).
Measure and improve how the website and product are used (our legitimate interest in improving Rerun, or your consent where required for analytics cookies).
Detect, prevent and address abuse, fraud and security issues (our legitimate interest, and compliance with legal obligations).

5. Cookies and analytics

The website uses strictly necessary cookies that are required for authentication and session management. We also use Datafast, a third-party privacy-focused web analytics provider, to understand aggregate traffic and improve the site. For details on the cookies and similar technologies we use and how to control them, see our Cookie Policy.

6. Sharing your data

We do not sell your personal data. We share it only with service providers that help us run Rerun (such as hosting, database, payments, background processing and AI inference providers), and only as needed to provide the service. These providers act as our sub-processors and are bound by appropriate contractual safeguards. The current list of sub-processors is maintained in our Data Processing Agreement.

We may also disclose data where required by law, to enforce our Terms of Service, or to protect the rights, safety and security of Rerun, our users and the public.

7. International transfers

Reunit SA is based in Luxembourg and we host core infrastructure within the European Union. Where a sub-processor processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. See the Data Processing Agreement for details.

8. How long we keep your data

We keep personal data for as long as your account is active and for as long as needed to provide the service. After that, we retain data only where required to meet legal, accounting or reporting obligations, to resolve disputes, or to enforce our agreements. When data is no longer needed, we delete or anonymise it.

9. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss or misuse, including access controls and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your data and to keep these measures up to date.

10. Your rights

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete or restrict the processing of your personal data, the right to data portability, and the right to object to certain processing. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at help@rerun.build. You also have the right to lodge a complaint with a supervisory authority. In Luxembourg, this is the Commission nationale pour la protection des données (CNPD).

11. Children

Rerun is not directed to children and is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at help@rerun.build and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of Rerun after an update means you accept the revised policy.

13. Contact us

For any privacy or data protection question, or to exercise your rights, contact us at:

Reunit SA 177 Rue de Luxembourg, L-8077 Bertrange, Luxembourg VAT: LU19540651 help@rerun.build