Privacy Policy

Last updated: 13 August 2026

1. Who we are

Rerun is operated by Reunit SA, a société anonyme incorporated in Luxembourg, with its registered office at 177 Rue de Luxembourg, L-8077 Bertrange, Grand Duchy of Luxembourg. In this policy, "Rerun", "we", "us" and "our" refer to Reunit SA.

This policy explains what personal data we collect when you use the Rerun website (https://rerun.build) and the Rerun service, why we collect it, and the rights you have over it. For questions about this policy or your data, contact us at help@rerun.build.

2. Our role under data protection law

For your account, billing and website data, Reunit SA is the data controller.

For the content your agents process when they run on Rerun's cloud infrastructure, Reunit SA acts as a processor on your behalf. That processing is governed by our Data Processing Agreement. If you run Rerun in self-hosted mode, your agents run on your own servers and that content never reaches us.

For the professional data we collect about people we invite to our experts programme, Reunit SA is the controller. Section 8 explains that processing.

We have not appointed a separate Data Protection Officer. The controller for the purposes of the GDPR is Reunit SA, and all data-subject requests go to help@rerun.build.

3. Data we collect

• Account data. Your name, email address and authentication details when you create and use a Rerun account.
• Billing data. Information needed to process payments and manage your subscription. Card details are handled by our payment provider and are not stored on our systems.
• Usage and device data. Basic technical information such as IP address, browser type and pages visited, collected when you use the website and the dashboard.
• Support and communications. Any information you send us when you contact help@rerun.build.
• Customer content. Data that your agents read, generate or pass to connected services while running a mission. When agents run on Rerun cloud, we process this content as a processor on your behalf (see the Data Processing Agreement). In self-hosted mode, this content stays on your infrastructure.
• Content you publish. Pages your agents publish to rerun.site, templates you submit to our public library, and the profile you submit if you join our experts programme. This content is public by design.
• Professional data about experts we invite. Publicly available professional details about people we consider for our experts programme, described in section 8.

We do not store your third-party service secrets or credentials in our database.

4. How we use your data and our legal bases

We use personal data to:

• Provide, operate and maintain the Rerun service (performance of our contract with you).
• Process payments and manage subscriptions (performance of our contract, and compliance with legal obligations).
• Communicate with you about your account, security and support requests (performance of our contract, and our legitimate interest in supporting and securing the service).
• Measure and improve how the website and product are used (our legitimate interest in improving Rerun, or your consent where required for analytics cookies).
• Detect, prevent and address abuse, fraud and security issues (our legitimate interest, and compliance with legal obligations).

5. Cookies and analytics

The website and the dashboard use strictly necessary cookies for authentication and session management, and cookies that remember your preferences such as your theme.

We also use PostHog for product analytics, to understand how the website and the dashboard are used and to improve them. PostHog is configured on its European infrastructure, analytics requests are sent through our own domain, and the cookies it sets are shared across our subdomains so that a visit to the website and a session in the dashboard are not counted as two unrelated people. We use it for product measurement only, not for advertising, and we do not track you across other websites.

Our support chat, Crisp, sets its own cookies when the widget loads.

For the full list of cookies, their retention and how to control them, see our Cookie Policy.

6. Sharing your data

We do not sell your personal data. We share it only with service providers that help us run Rerun (such as hosting, database, payments, background processing and AI inference providers), and only as needed to provide the service. These providers act as our sub-processors and are bound by appropriate contractual safeguards. The current list of sub-processors that handle the content your agents process is maintained in our Data Processing Agreement.

The providers below handle data for which we are the controller, so they are not listed in that annex:

We may also disclose data where required by law, to enforce our Terms of Service, or to protect the rights, safety and security of Rerun, our users and the public.

7. Google user data

When you connect a Google service to a Rerun agent, you authorise Rerun to access that data through Google's APIs. Rerun's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We deliberately request the narrowest access each connector needs:

• Gmail: sending only. Rerun cannot read, search or list your mailbox.
• Google Drive, Docs and Sheets: per file access, limited to the files your agent creates and the files you explicitly point it at.
• Google Calendar: your calendar list and the events your agent manages.
• Google Analytics: read only.
• Google Indexing API: submitting URLs for the sites you own.

In practice:

• We access your Google data only to carry out the features you asked your agent to perform, such as sending an email on your behalf, or saving a file to Drive.
• We do not sell that data, and we do not transfer it to third parties except to the sub-processors needed to run the feature you requested, listed in our Data Processing Agreement.
• We do not use it for advertising, advertising personalisation or credit assessment.
• We do not use it to develop, improve or train generalised AI or machine learning models. Where an agent passes content to an AI model to complete the task you gave it, that provider acts as our sub-processor and is contractually barred from training on your content.
• No one at Rerun reads your Google data, except with your explicit consent for a support request you raised, for security purposes such as investigating abuse, or where the law requires it.
• Your Google authorisation tokens are held by the engine that runs your agents, never in our database. Our servers forward a token per request to call the Google API on your behalf and do not retain it.
• You can revoke Rerun's access at any time from the agent's Services panel, or from your Google Account permissions page. Revoking deletes the stored token.

8. Experts programme and professional contact data

We run an experts programme that lists independent professionals who can help companies put agents to work. To build it, we collect professional details that people have made public themselves, mainly on professional networks: name, public profile, role, company, skills and public profile picture. We use specialist providers to collect these public profiles and to verify a professional email address so we can reach the right person.

We use that data to invite the person to join the programme, and we rely on our legitimate interest in developing a professional network relevant to our service. Nothing about a person is published until they claim their profile and choose what it says. Invitations always let the recipient decline or ask to be removed.

If we contacted you or you appear in the programme, you can ask us at any time to see, correct or delete what we hold, or to stop contacting you, by writing to help@rerun.build. We will act on that request and keep the minimum record needed not to contact you again.

9. International transfers

Reunit SA is based in Luxembourg and we host core infrastructure within the European Union. Where a sub-processor processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. See the Data Processing Agreement for details.

10. How long we keep your data

We keep personal data for as long as your account is active and for as long as needed to provide the service. After that, we retain data only where required to meet legal, accounting or reporting obligations, to resolve disputes, or to enforce our agreements. When data is no longer needed, we delete or anonymise it.

11. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss or misuse, including access controls and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your data and to keep these measures up to date.

12. Your rights

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete or restrict the processing of your personal data, the right to data portability, and the right to object to certain processing. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at help@rerun.build. You also have the right to lodge a complaint with a supervisory authority. In Luxembourg, this is the Commission nationale pour la protection des données (CNPD).

13. Children

Rerun is not directed to children and is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at help@rerun.build and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of Rerun after an update means you accept the revised policy.

15. Contact us

For any privacy or data protection question, or to exercise your rights, contact us at:

Reunit SA 177 Rue de Luxembourg, L-8077 Bertrange, Luxembourg VAT: LU19540651 help@rerun.build