Privacy Notice

Runway ("Runway", "we", "us") is the seller and provider of the Runway service. For the personal data described below, Runway acts as the data controller: we decide what data is collected and why. Where an employer uses Runway to onboard their own staff, that employer decides what onboarding content and employee details to enter, and we process that information on their behalf.

Personal data we collect and why

• Account data — name, email address, login credentials (stored hashed), and authentication provider (e.g. Google). Used to create and secure your account and sign you in. Legal basis: performance of our contract with you.
• Onboarding content — shop or company name, role templates, hire names and start dates, schedules, required reading, goals, and progress updates. Used to provide the Service. Legal basis: performance of our contract.
• Subscription and plan data — the plan you hold, its status and billing period, and the identifiers our payment provider returns. Used to give you the right access level and to keep billing records. Legal basis: contract and legal obligation. Card and billing address details are collected and held by Paddle, not by us.
• Support messages — the content of your enquiries. Used to answer you. Legal basis: legitimate interests in supporting customers.
• Usage, device and log data — IP address, browser and device identifiers, pages viewed, and error reports. Used for security, fraud prevention, diagnostics, and improving the product. Legal basis: legitimate interests in a secure, working service.
• Marketing communications — where you opt in, your email address is used to send product updates. Legal basis: consent, which you can withdraw at any time.

Who we share data with

• Service providers and subprocessors — hosting, database, authentication, email delivery, error monitoring, and analytics providers, acting on our instructions.
• Merchant of Record — Paddle.com handles the sale of our product, subscription management, payments, tax compliance, invoicing, and refunds.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law or to protect our legal rights.

We do not sell personal data.

International transfers

We are based in the United States, and our providers may process data in the United States and other countries. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision.

Retention

We keep account and onboarding data for as long as your account is active. After your account is closed we delete or anonymise it within 90 days, except where we must keep records longer to meet legal, tax, or accounting obligations. Log data is kept for a short period, typically up to 12 months.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, encryption at rest, row-level access controls so each account can only reach its own records, and restricted administrative access.

Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent you have given. If you are in the UK or EEA you may also complain to your local supervisory authority. We respond to requests within one month.

Cookies

We use essential cookies and similar local storage to keep you signed in and to keep the Service secure; these cannot be switched off without breaking sign-in. Any analytics cookies are used only to understand aggregate usage, and we do not use advertising cookies to track you across other websites. You can clear or block cookies in your browser settings.

Contact

To exercise your rights or ask about this notice, contact Runway using the contact details published on this site. Billing and payment enquiries are handled by Paddle at paddle.net.