Privacy Policy

How we collect, use, and protect your personal data.

Last updated: January 15, 2026

1. Introduction

Runax Software LTD ("Runax," "we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website runaxsoftware.com, use our products, or engage with our services.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws. By using our website or services, you consent to the practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

Runax Software LTD

Cyprus Limited Company

Registration Number: HE 487915

Agias Zonis 12, AGIA ZONI CENTER, 4th floor, Office 404

Agia Zoni, 3027, Limassol, Cyprus

Data Protection Contact: team@runaxsoftware.com

3. Information We Collect

3.1 Information You Provide Directly

  • Contact Information: Name, email address, phone number, company name, and job title when you contact us or request information about our products.
  • Account Information: If you create an account to access our products, we collect your login credentials and profile information.
  • Communications: Records of your correspondence with us, including emails, support tickets, and feedback.
  • Business Information: Company details, project requirements, and other information you share during business discussions.

3.2 Information Collected Automatically

  • Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
  • Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths.
  • Location Data: Approximate geographic location based on IP address.
  • Cookies and Similar Technologies: Information collected through cookies, pixels, and similar tracking technologies (see our Cookie Policy).

3.3 Information from Third Parties

  • Analytics Providers: Aggregated website analytics and user behavior data.
  • Business Partners: Information shared by partners in connection with joint offerings or referrals.
  • Public Sources: Publicly available business information for B2B purposes.

4. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

  • • Provide and maintain our products
  • • Process transactions and send related information
  • • Respond to inquiries and provide support
  • • Send administrative communications

Improvement & Development

  • • Analyze usage patterns to improve products
  • • Develop new features and services
  • • Conduct research and analytics
  • • Test and debug our systems

Communication

  • • Send product updates and announcements
  • • Provide marketing communications (with consent)
  • • Share relevant industry information
  • • Conduct surveys and collect feedback

Legal & Security

  • • Comply with legal obligations
  • • Protect against fraud and abuse
  • • Enforce our terms and policies
  • • Protect rights and safety

5. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing necessary to perform a contract with you or take steps at your request before entering into a contract.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and fraud prevention, where these interests are not overridden by your rights.
  • Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations.

6. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

  • Service Providers: Third-party vendors who perform services on our behalf, such as hosting, analytics, payment processing, and customer support. These providers are contractually bound to protect your data.
  • Business Partners: Partners with whom we jointly offer products or services, with your consent.
  • Legal Requirements: When required by law, regulation, legal process, or government request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
  • Protection of Rights: When necessary to protect our rights, privacy, safety, or property, or that of our users or others.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:

  • EU Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection standards
  • Binding Corporate Rules for intra-group transfers
  • Your explicit consent for specific transfers

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Retention Periods

  • Contact form submissions: 3 years from last interaction
  • Account data: Duration of account plus 2 years
  • Transaction records: 7 years for legal compliance
  • Marketing preferences: Until consent is withdrawn
  • Analytics data: 26 months (anonymized thereafter)

9. Your Rights

Under GDPR and other applicable privacy laws, you have the following rights regarding your personal data:

Right of Access

Request a copy of your personal data we hold.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Restrict Processing

Request limitation of how we use your data.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for marketing.

To exercise any of these rights, please contact us at team@runaxsoftware.com. We will respond to your request within 30 days.

10. Data Security

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256)
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Employee training on data protection and security
  • Incident response procedures and breach notification protocols
  • Regular backups and disaster recovery planning

11. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your data, please contact us:

Runax Software LTD

Email: team@runaxsoftware.com

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.