RunPod · RunPod Privacy Policy · View original document ↗

EU and EEA User Rights (GDPR)

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity RunPod recorded 4 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for RunPod Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The policy acknowledges GDPR data subject rights for EU/EEA users, including access, correction, deletion, objection to processing, restriction of processing, and data portability, exercisable by contacting RunPod directly.

This analysis describes what RunPod's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes that RunPod asserts GDPR compliance obligations for EU/EEA users and commits to honoring the full range of GDPR data subject rights, which creates enforceable obligations under EU law and may be subject to supervisory authority review.

Change history

modified May 23, 2026

Previous version had 'Geo-Targeted Cookie Consent (EU and California)' with no excerpt; current version provides explicit GDPR rights with detailed enumeration of user rights.

View full change record →

Consumer impact (what this means for users)

Under this clause, EU and EEA users may submit requests to access, correct, delete, port, object to, or restrict processing of their personal data. The policy does not specify response timelines in the reviewed text, though GDPR requires responses within one month of a valid request.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    EU/EEA users can submit access, deletion, portability, correction, or objection requests by emailing privacy@runpod.io. Specify the right you are exercising and the data categories involved.
  • Export Your Data
    Submit a data portability request by emailing privacy@runpod.io, specifying the personal data categories you wish to receive in a portable format.

How other platforms handle this

Grindr Medium

Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...

Strava Medium

For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.

BeReal Medium

Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data. EU and UK users may also have the right to object to or restrict certain processing. California residents may have the right to know, delete, corre...

See all platforms with this clause type →

Monitoring

RunPod has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are located in the European Union or European Economic Area, you have certain rights under the General Data Protection Regulation (GDPR), including the right to access, correct, update, or request deletion of your personal information. You also have the right to object to processing of your personal information, ask us to restrict processing of your personal information, and request portability of your personal information.

— Excerpt from RunPod's RunPod Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: This provision directly engages GDPR Articles 15-22 (data subject rights) and Article 77 (right to lodge a complaint with a supervisory authority). EU/EEA users may escalate unresolved rights requests to their national data protection authority. The policy's assertion of GDPR applicability creates corresponding obligations regarding response timelines, identity verification procedures, and documentation of rights requests. 2) GOVERNANCE EXPOSURE: Medium. The policy asserts GDPR rights without specifying the operational procedures for honoring those rights, including response timelines, identity verification steps, or escalation paths, which may require supplementary documentation to demonstrate GDPR compliance. 3) JURISDICTION FLAGS: All EU and EEA member states are covered. Users in Germany, France, and other jurisdictions with active data protection authorities may have additional rights or procedural options under national GDPR implementations. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers subject to their own GDPR obligations should verify that RunPod's rights-handling procedures are operationally capable of supporting downstream rights requests where RunPod processes personal data on their behalf. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that RunPod has appointed a Data Protection Officer or designated contact for GDPR purposes if required, that its rights request procedures meet the one-month response requirement, and that its lawful basis documentation covers all processing activities disclosed in the policy.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    EU supervisory authorities (national data protection authorities) enforce GDPR rights; the State_AG field is used here as the closest available proxy for regulatory authority, though EU DPAs are the primary enforcement bodies.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
RunPod Privacy Policy
Entity
RunPod
Document last updated
May 5, 2026
Tracking information
First tracked
May 21, 2026
Last verified
May 21, 2026
Record ID
CA-P-013131
Document ID
CA-D-00652
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
e8fd7ba63e813ee73f0c96deb9ccb3018c05e6ab0a76e7b8b13390c4919eb86f
Analysis generated
May 21, 2026 05:23 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: RunPod
Document: RunPod Privacy Policy
Record ID: CA-P-013131
Captured: 2026-05-21 05:23:16 UTC
SHA-256: e8fd7ba63e813ee7…
URL: https://conductatlas.com/platform/runpod/runpod-privacy-policy/eu-and-eea-user-rights-gdpr/
Accessed: June 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does RunPod's EU and EEA User Rights (GDPR) clause do?

This provision establishes that RunPod asserts GDPR compliance obligations for EU/EEA users and commits to honoring the full range of GDPR data subject rights, which creates enforceable obligations under EU law and may be subject to supervisory authority review.

How does this clause affect you?

Under this clause, EU and EEA users may submit requests to access, correct, delete, port, object to, or restrict processing of their personal data. The policy does not specify response timelines in the reviewed text, though GDPR requires responses within one month of a valid request.

Is ConductAtlas affiliated with RunPod?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by RunPod.