Privacy policy

Hive Runner is a service of The Computer Plumbers ("we", "us"). This policy says what personal information the service collects, why, and what you can do about it. The security page describes the same ground from the technical side.

What we collect

• Your account. When you sign in with GitHub we receive your GitHub user ID, username, display name, avatar and email address.
• Your organization. For an organization that has installed the GitHub App: its name, and for people who sign in, whether GitHub says they are members or owners and whether they are on a team the hive is limited to.
• Machines. For each machine added to a hive: the name it reports, model, operating system, architecture, number of cores, memory, a measured speed score, the daemon's version, whether it is connected, and when it was last seen.
• Jobs. For each job: the repository name, the workflow run and job IDs, the job's name and label, its size, when it started and ended, its result, the machine that ran it and its price.
• Payments. Your organization's balance and its history. Card payments are handled by Stripe; we receive a customer reference and the outcome of a payment, not the card number.
• Connected apps. If you connect an agent or other client, which one it is and what you allowed it to do.
• Technical records. IP address, browser type and the time of requests, kept with your sign-in sessions and in server logs.
• Messages. What you send when you write to us.

What we do not collect

The service does not receive your source code, build output, job logs, artifacts, caches or secrets. The runner inside a job's virtual machine talks to GitHub directly, and the GitHub App has no permission to read code, repository contents or secrets.

How we use it

• to sign you in and decide which hives you belong to;
• to assign jobs to machines and show a hive its activity;
• to price jobs, keep balances and take payment;
• to keep the service secure and prevent abuse;
• to send messages about your account, such as a low balance or a budget being reached;
• to fix problems and improve the service;
• to meet legal obligations.

Where the law asks for a legal basis, we rely on performing our agreement with you, our legitimate interest in running and securing the service, and legal obligation.

Cookies

We set a cookie to keep you signed in, and your browser stores your choice of light or dark theme. We do not use advertising cookies or third-party analytics.

Who sees it

• Other members of your hive. They can see the machines in it, who added each one, the jobs it has run and its leaderboard.
• Providers that run the service for us. GitHub, for sign-in and to run jobs; Cloudflare, for hosting, storage and email; Stripe, for payments. Each handles information under its own terms and only to provide its service.
• Authorities, when the law requires it or to protect rights and safety.
• A successor, if the service is sold or merged, under this policy.

We do not sell personal information.

How long we keep it

We keep account, machine and job records while your organization uses the service. Payment and balance records are kept as long as accounting and tax rules require. Sign-in sessions expire, and server logs are kept for a limited time. When you ask us to delete your information we do so, except what we must keep by law.

Security

We protect information with access controls and encryption in transit. No service can promise perfect security. If we learn of a breach that affects you, we will tell you as the law requires.

Your choices and rights

You can remove a machine, uninstall the daemon, or have an owner uninstall the GitHub App at any time. Depending on where you live, you may have the right to see, correct, export or delete your personal information, to object to or restrict how we use it, and to complain to your data protection authority. Text 435-773-0209 and we will answer within the time the law sets. We will not treat you differently for using these rights.

Where it is processed

Our providers process information in the United States and in other countries where they operate. Where the law requires safeguards for such transfers, we rely on the ones our providers offer.

Children

The service is for people who work on software. It is not directed to children under 16, and we do not knowingly collect their information.

Changes

We may update this policy. The date at the top shows when it last changed, and we will give notice of material changes on this site or by email.

Contact

Questions or requests: text 435-773-0209