1. Purpose and Scope
This Data Processing Agreement ("DPA") supplements the RunMark Terms of Service and applies whenever RunMark processes personal data on a customer's behalf ("Customer") through the RunMark platform.
Legal
Data Processing Agreement
Last updated: August 11, 2026
2. Roles of the Parties
For personal data submitted to RunMark by or on behalf of Customer ("Customer Data"), Customer is the data controller (or business, under CCPA) and RunMark is the data processor (or service provider).
3. Processing Instructions
RunMark processes Customer Data only to provide the service, as instructed by Customer through its use of RunMark, or as required by applicable law.
4. Subprocessors
RunMark uses the following subprocessors to operate the platform: Google Cloud / Firebase (hosting, authentication, database, and file storage), Stripe (payment processing), Google (order-parsing and assistant features), Resend (transactional email), and Sentry (error monitoring). RunMark will update this page to reflect material changes to this list.
5. Security Measures
RunMark uses encryption in transit and at rest, role-based access controls, and organization-scoped data isolation to protect Customer Data. Access to production systems is limited to personnel who need it to operate the service.
6. Data Subject Requests
RunMark will assist Customer in responding to requests from individuals to access, correct, or delete their personal data, to the extent RunMark controls that data.
7. International Data Transfers
Where Customer Data is transferred outside the country in which it was collected, RunMark relies on its subprocessors' Standard Contractual Clauses or equivalent safeguards.
8. Data Retention and Deletion
RunMark retains Customer Data for as long as Customer's account is active. Within 30 days of account closure, RunMark deletes Customer Data, except where retention is required for legal, security, or fraud-prevention purposes.
9. Audits
On reasonable request, no more than once per year, RunMark will provide information necessary to demonstrate compliance with this DPA, such as a summary of security practices or a completed security questionnaire.
10. Contact
For DPA or data protection questions, contact support@runmark.app.