What we collect. What we don’t.
This page describes how runcolony.com handles information about visitors to the site and people who fill in the pilot form. For how Colony handles your code and your tenant’s data inside the product, see Security & trust.
Last updated . This document is a plain-language summary; the legally operative privacy policy is being reviewed by counsel and will replace this page when it lands. If something here matters for your procurement and you need the long version sooner, email [email protected].
Who runs this site.
The site is operated by Beehive Media, LLC, the company behind Colony. When this page says we, that’s who it means. Postal address available on request.
What we collect from you directly.
The only form on this site is the pilot inquiry at /pilot/. When you submit it, we receive:
- The fields you fill in: name, work email, company, company size, primary stack, monthly commit volume, your use-case description, and (optionally) how you heard about us.
- A Cloudflare Turnstile token used to verify you’re not a bot. The token itself is consumed at verification time and not retained.
- Your IP address — used to rate-limit the form against abuse, retained for at most an hour in a key-value store keyed only to a counter (not to your submission).
We use your inquiry only to scope a pilot reply and to follow up by email. We do not add you to a mailing list, we do not sell or rent your contact info, and we do not sequence you with marketing automation. If you don’t hear from us within two business days, that’s a bug — tell us.
What we collect passively.
The site uses two third-party services for visitor analytics and security:
- PostHog for product analytics — what pages were viewed, what links were clicked, what referrer brought you in. We do not enable PostHog session replay, autocapture of form field values, or cross-site cookies. The PostHog event for a pilot submission records the company-size selection and the truncated “how did you hear” field; it does not capture your name or email.
- Cloudflare for hosting, DDoS protection, and the Turnstile bot check. Cloudflare logs request metadata (IP, user agent, URL) for security purposes; we don’t add to or modify that retention.
The site does not use third-party advertising cookies. The site does not feed your data to retargeting platforms.
Who we share it with.
When you submit the pilot form, the contents are fanned out to two systems we operate:
- Email via Amazon SES (US-East-2) to
[email protected]. - Slack, via an internal webhook to a private channel monitored by the team.
We do not share pilot-form contents with any party outside Beehive Media employees and contractors who need it to respond to your inquiry. PostHog and Cloudflare are independent processors with their own privacy terms; nothing about your submission is sent to either.
How long we keep it.
Pilot-form inquiries are kept in our email and Slack archives for the lifetime of the business relationship, plus the period required by jurisdiction for tax and finance records if the relationship becomes a contract. If you ask us to delete an inquiry that didn’t turn into a contract, we’ll do it within thirty days and confirm by email.
Your rights.
If you’re in a jurisdiction that grants rights of access, correction, deletion, or portability over your personal data (the EU, the UK, California, several US states), you have those rights against us. The simplest way to exercise them is to email [email protected] from the address you submitted — we’ll respond within thirty days.
Changes.
When we update this page in a way that materially changes what we collect or how we use it, we’ll change the “last updated” date at the top and note the change in the site changelog. We will not silently broaden what we collect.
Contact.
Privacy questions: [email protected].
Security disclosures: [email protected].
Everything else: [email protected].