This notice covers runorder.app — the public site, the contact form, and signing in. Data held inside a theatre's own workspace is a separate matter: there the theatre is the controller and Greyframe is its processor, under the Data Processing Agreement signed at the start of the engagement.
Greyframe AS, Norway, is the controller for everything described on this page. Write to hi@runorder.app with any question about it, including a request to exercise the rights below.
Nothing, until you send it. Reading the marketing pages writes nothing to your browser's storage and sets no cookie of ours. Cloudflare, who host the site, may set a strictly necessary security cookie to filter bot traffic.
The contact form on /pricing. What you type — your name, email, organisation, role, staff bracket, current planning tool, and your note — is emailed to our sales inbox and stored nowhere else in the product. Our lawful basis is legitimate interest in answering a business enquiry; we keep the mail under our ordinary mailbox policy, and you can ask us to delete it at any time. Your email address goes on Reply-To so a person can reply to you directly.
Abuse limits. Because that form sends mail, we count recent submissions per connection to stop it being used as a relay. That record is your IP address and a few timestamps, held for at most two hours and then deleted automatically.
We use no advertising cookies, no third-party trackers, and no cross-site profiling.
Signing in sets a session cookie. It is strictly necessary — without it there is no way to stay signed in — so it is set without asking.
Product analytics run on PostHog's EU infrastructure, and are deliberately declawed: no page-view capture, no autocapture, and in-memory storage only, so nothing is written to your device and nothing follows you between visits. What it records is a handful of named events on the signed-in surfaces — that a login succeeded, that setup completed — never the contents of your workspace.
Cloudflare hosts the product and stores its data (EU regional infrastructure), and delivers our transactional and notification email. PostHog receives the analytics events described above, on their EU instance. We do not sell or share personal data with anyone else, and we do not use it for advertising.
You may ask for access to your personal data, correction, erasure, a portable copy, or to object to processing based on legitimate interest.
If you are a user of a theatre's workspace, start with your workspace administrator — they hold the controls that action access, export, and deletion directly, and they are the controller for that data. Anything they cannot resolve, and anything about this site, comes to hi@runorder.app. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet).
Last updated: 2026-08-13 · questions to hi@runorder.app