Privacy policy

Version of November 14, 2026. Applies to gitup.online, the customer portal and the GitUP CI runner service.

1. Who we are

GitUP is operated by CloudOS [LEGAL NAME AND ADDRESS TO COMPLETE], in Quebec. The person in charge of the protection of personal information under Quebec's Law 25 is [NAME AND TITLE TO COMPLETE], reachable at support@cloudos.ca.

2. What we collect and why

• Account: email address, password (stored only as an argon2id hash), two-factor secret (encrypted), language. Purpose: identify you and secure access.
• Subscription and payments: PayPal subscription identifiers (we do not keep the buyer's name or address that PayPal sends), plan, payment amounts and dates. We never receive your card data or full PayPal account. Purpose: bill the service and keep accounts.
• Workspace and forge: workspace identifier, type and address of your forge (GitLab, Forgejo, Gitea). The runner token is passed to the cluster and never stored in our database. Purpose: provide the service.
• Job execution: your pipelines' code, CI secrets, images and logs are processed in a micro-VM destroyed at the end of each job; the cache and Sonar instance (if you chose them) keep data in your workspace. We record the date, duration, size and outcome of each job for the usage shown to you and for capacity planning.
• Security: IP addresses of login attempts (rate limiting, deleted after less than an hour) and technical logs.

3. Where the data is

GitUP's servers are rented in Montréal (Quebec) from Leaseweb and OneProvider. Your code, artifacts, job logs, the portal database and backups are stored there.

Exception you should know about: one control-plane node of the Kubernetes cluster is located in France. It receives a copy of the cluster configuration, which includes your workspace's technical secrets (runner token, Sonar and cache credentials). It does not run your jobs and receives neither your code nor your artifacts. This transfer outside Quebec was the subject of a privacy impact assessment [ASSESSMENT TO DOCUMENT].

PayPal processes your payments under its own privacy policy, possibly outside Canada.

4. Sharing

We do not sell or rent your information. It is only shared with the processors needed for the service — PayPal (payment), Leaseweb and OneProvider (hosting), our transactional email provider [TO COMPLETE] — or when the law requires it.

5. Retention

• Workspace and job data: deleted 30 days after the end of the paid period of a cancelled subscription (you get a notice 7 days before), or immediately if you delete your account (job statistics included).
• Account: until you delete it; it is then anonymized.
• Payments: 6 years, for accounting and tax obligations, without your email once the account is deleted.
• Backup snapshots of the Sonar instance: 7 days.

6. Your rights (Law 25 and GDPR)

You can access your information, have it corrected, get a copy in a structured format ("Export my data" in your dashboard), withdraw consent, ask for deletion ("Delete my account") or object to a processing. For any request: support@cloudos.ca; we answer within 30 days. You can also contact the Commission d'accès à l'information du Québec or, in the European Union, your data protection authority.

Legal basis (GDPR): performance of the contract for the service and billing, legal obligations for accounting, our legitimate interest for security.

7. Security

Each job isolated in a micro-VM, per-customer networks, encrypted portal secrets, two-factor authentication, limited and logged admin access. If a confidentiality incident presents a risk of serious injury, we notify you and the Commission d'accès à l'information, and we keep an incident register.

8. Cookies

See the cookie policy.

9. Changes

We notify you by email of any significant change at least 30 days before it takes effect.