Privacy notice.

Who is responsible

Delo Run is the controller of the personal data this notice describes. Write to support@delorun.com about anything in it, including to use your rights.

What is stored

Your account: the email address you signed up with, a display name if you gave one, and a password hash. The password itself is never stored and cannot be recovered; a reset issues a new one.

Your workspace: the files the agent reads and writes, the sessions and their full transcripts, your settings, and any credentials you store for a model provider. These live in a durable store keyed to your account, and they persist between visits.

Your membership: the plan you pay for, your Stripe customer and subscription references, your monthly limit, and your purchased credit.

Operational records: how much platform inference your turns used, and when your machine ran. These are what your usage figures are computed from.

Security records: the IP address and browser of each signed-in session, used to limit repeated sign-in attempts and to protect your account.

Visit counts: when you open a public page, Cloudflare Web Analytics counts the visit: the page, the site that linked you, your browser, device type and country, and how quickly the page loaded. It sets no cookie and keeps no identifier, so it cannot recognise you on a later visit or follow you to other sites. Your account, plan, checkout and sign-in pages are not counted.

Product analytics: when you use the site or the studio, PostHog records the pages you open, the links and buttons you use, how quickly pages load, and errors; on the site it also records a replay of the page with every field you type into hidden, and it never records replays of the studio. In the UK, the EEA and Switzerland it counts your visits without cookies and does not recognise you in the browser; elsewhere it sets cookies to recognise your browser and, once you sign in, links the records to your account. Our servers also record account events, such as sign-up, sign-in, plan changes, workspaces, imports and machine time, and for each included model call its model, token counts and timing, never its prompt or answer.

Why we use it

To provide the service you signed up for, under our contract with you: your account, your workspace and sessions, running the agent and its commands, and billing your plan.

To meet legal obligations, such as keeping payment and invoice records for tax law.

For our legitimate interest in keeping Delo Run secure and working: rate limits, abuse prevention, service logs and status checks. These use as little personal data as they can, and you can object to them.

We do not sell your data, use it for advertising, or use your files and sessions to train models. We make no decision about you by automated means alone that has a legal or similarly significant effect.

Where it is stored

On Cloudflare’s network. The identity and billing database is a Cloudflare D1 database; the workspace store and the machines that run your commands are Cloudflare services. Card details are held by Stripe, never by Delo Run.

A machine’s own disk is disposable: it is wiped whenever the machine sleeps, and the durable copy is the one described above.

Who receives it

Cloudflare hosts Delo Run: the site, the workspace store, the machines and email delivery. Stripe processes payments and holds your card details. Both act on our instructions under data processing terms.

Your conversation (the messages, the files the agent reads into context, and the tool results it produces) is sent to whichever model provider serves the turn. If you bring your own key, that is your provider and your agreement with them. Included inference uses the platform’s own key and goes to DeepSeek, whose own terms apply.

Model providers and external tools receive the data sent in their requests. Their own terms and retention policies apply. Review the providers and plugins in your workspace before using sensitive material.

If you connect GitHub, the repositories and actions you choose are exchanged with GitHub under your GitHub account.

PostHog receives the product analytics described above in its EU cloud and acts on our instructions under its data processing terms.

Transfers outside the UK

Cloudflare and Stripe may process data in the United States and elsewhere, under the UK safeguards in their data processing terms: the UK International Data Transfer Addendum and, where they are certified, the UK Extension to the EU-US Data Privacy Framework.

Included inference sends your conversation to DeepSeek, which processes and stores it in the People’s Republic of China. The UK has not found that China protects personal data adequately, and authorities there may be able to require access to it. The transfer is made because it is necessary to run the turns you ask the included models for.

If you do not want your conversations to reach China, add your own key for a provider elsewhere in the workspace’s settings and choose its models for your chats; included inference is then not used for them.

Cookies

One session cookie, set when you sign in. It is host-only (sent only to this hostname), HttpOnly (unreadable from page scripts), Secure (HTTPS only) and SameSite=Lax. Signing out invalidates the session server-side.

The workspace also issues its own short-lived session for the application’s transport. It carries no personal data beyond the account it belongs to.

Outside the UK, the EEA and Switzerland, PostHog's analytics cookie (ph_…) recognises your browser across this site and the studio. If you opt out, a cookie records that choice, and another (delo_analytics_notice) records that you have seen the analytics notice.

Analytics choices

You can turn analytics off at any time. The choice applies to this browser on this site and on the studio, and lasts until you clear the site's cookies.

Search engines

The public pages can be indexed by search engines. Your account pages, workspace and sessions are never public.

Keeping and deleting

Your files and sessions stay until you delete them or delete your account. Deleting your account erases your workspace (its files, sessions, settings and any machine), cancels your subscription immediately and removes your account, its plan records, its usage records and any purchased credit.

Deletion is self-service from the account page and asks for your password. If you cannot sign in, write to support@delorun.com from the address you signed up with and the operator will remove it for you.

Deleted data stays in Cloudflare’s point-in-time backups for up to 30 days, from which only the operator can restore it, to recover from a fault; then it is gone. Stripe keeps payment and invoice records for as long as tax law requires (six years in the UK). Service logs are kept for up to 7 days.

Your rights

You can ask for a copy of your data, for it to be corrected or erased, to restrict or object to how we use it, and to receive the data you gave us in a portable form. Your files and sessions can also be exported from the workspace at any time. Write to support@delorun.com; we answer within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We would like the chance to put it right first.

Changes to this notice

We update this notice when what we hold, or who receives it, changes, and tell you about material changes before they take effect.