Privacy Policy
Version 2026-10-15
What we collect, why we need it, who we share it with, and how to get a copy or have it deleted.
Draft for legal review. This document describes how rent-gpu.app works today, but it has not yet been reviewed by counsel and may change before launch.
What we collect
- Account: email address, name, a hash of your password, two-factor settings, organization and team membership.
- Security records: IP address and browser for each session, sign-ins, and an audit log of account actions.
- Billing: credit purchases, usage and the ledger of every charge. Stripe handles card details; we never receive or store full card numbers.
- Instances: the image, settings, environment variables and SSH public keys you choose. Environment variables are encrypted at rest.
- Hosts: machine hardware, measured bandwidth, disk, benchmarks, uptime and the machine’s IP address, all reported by our host software. Stripe verifies host identity for payouts and holds those documents; we receive only the result.
- Messages: emails we send you, support requests and abuse reports.
We do not store what your containers compute. Logs and terminal sessions pass through our relay to your browser or CLI and are not kept. We do not use analytics or advertising trackers.
Why we use it
To run the service, bill and pay out correctly, keep accounts secure, prevent fraud and abuse, answer you, and meet legal duties such as tax records.
Who we share it with
- The host running your instance receives what it needs to run it: the image, environment variables and your SSH public keys. See the host-access notice in the Terms.
- Renters see a host’s display name, region and measured machine figures, but not the host’s identity. A machine’s IP address is visible only when the host offers direct ports.
- Service providers: Stripe (payments and host identity), our email provider, and DigitalOcean (hosting). Each processes data only for us.
- The public: GPU serial identifiers of machines banned for fraud are published so renters elsewhere can check them.
- Authorities, when the law requires it. Where allowed, we tell you first.
We do not sell personal data.
How long we keep it
Account data is kept while your account is open. Ledger and payment records are kept as long as tax and accounting law requires, even after the account closes, with your name and email removed where the law allows. Security records are kept only as long as they are useful for security.
Cookies
We set one cookie, rg_session, which keeps you signed in. Your light or dark theme choice is saved in your browser’s local storage. Both are needed for the site to work, so we do not ask for consent to them.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account. Email privacy@rent-gpu.app from the address on the account and we will reply within 30 days. If you are in the EU, UK or another place with data protection law, you may also complain to your local regulator.
Children
rent-gpu.app is not for anyone under 18.
Contact
Privacy questions: privacy@rent-gpu.app.