Runway Hero Privacy Policy
Revised: October 17, 2026
Effective: October 17, 2026
1. Scope and responsibility
Runway Hero LLC, doing business as Runway Hero ("we," "us," or "our"), provides websites, applications, browser extensions, software, and related services (the "Services"). This Policy describes personal-information handling across our current and future Services where we determine its purposes and means. A description applies only when you use the corresponding functionality; not every Service collects every category or uses every feature below.
When we process information solely on a business client's instructions, that client determines its use under the applicable client agreement and data-processing terms. Direct requests about client-controlled information to that client; we assist as required. Our own account, billing, security, and business records remain covered by this Policy where we determine their use.
For questions, privacy requests, or concerns, use the Contact section.
2. Information we process
Information you provide
Depending on the Service, you may provide contact and account details, business information, preferences, messages, support requests, resumes, forms, records, files, and other content. We also process purchase details, invoices, subscription status, and transaction references needed for access, billing, and support. Payment providers such as Apple and Stripe handle payment credentials through their systems; their handling is governed by their policies. We receive the transaction and billing information needed for our role, not a general right to use your financial accounts.
Where a Service records and replays your selected inputs, those saved inputs are distinct from microphone or camera recordings. Local tools may store sessions, files, preferences, and history only in your browser or device. Choosing an external integration, export, share, or submission can transmit selected information to its destination. Local storage does not mean every Service operates without cloud processing.
Service, device, and operational information
We process information about how Services operate, including actions, event times, outcomes, errors, app versions, operating systems, device models, random installation/account identifiers, and connection or security records. Depending on the task, this may include selected database or document details, aircraft or equipment context, removable-media identifiers and capacity, workflow stages, and bounded diagnostic metadata. Some records are linked to an account or contact email; they are not necessarily anonymous.
Servers and service providers may receive IP addresses, browser/device details, request information, and security logs. An IP address may indicate an approximate region. It does not necessarily identify your actual location, particularly when a relay or VPN is involved.
Connected accounts and external sources
When you connect another service, we process the account references, permissions, authorized information, and authentication material needed for that integration. Credential handling varies with its design. Some credentials stay in the device's secure storage; others must be processed by an authorized server-side connector. We do not claim all credentials for all products remain on-device. We restrict their use to operating and securing the connection and do not intentionally place secret credentials in ordinary diagnostics or support reports.
Some Services use public websites, business directories, job listings, public posts, or information supplied by your organization or other users. These sources can include personal information. We use it for the disclosed search, analysis, workflow, or community function; public availability does not eliminate applicable privacy rights.
Fitness, activity, location, and live interaction
Where offered, fitness features process the activity summaries, goals, progress, and related preferences needed to provide tracking and social functionality. Relevant information may come from your input or supported device/platform features you authorize. We request the permissions required for the applicable feature. Fitness information can be sensitive even when the Service does not provide medical care. We do not use it for targeted advertising or general-purpose model training.
We collect precise device location only for relevant features with your explicit permission. You can withdraw location permission through your device or the available Service controls; location-dependent functions may then stop working. Approximate region inferred from a network connection is separate from precise device-location permission.
Where live microphone or camera interaction is offered, we and the providers supporting that feature process the stream to conduct the interaction. We do not record or retain those live audio/video streams. Information you separately submit or save, such as form answers, messages, or activity summaries, may be retained for the associated function. This statement does not mean that every Service uses a microphone or camera, or that no other operational information is retained.
3. Why we use information
We use information as reasonably necessary to:
Provide, maintain, personalize, and improve the functions you use, including accounts, synchronization, integrations, downloads, translation, automation, and selected sharing.
Process purchases, administer subscriptions, verify access, and respond to billing matters.
Provide support, investigate faults, assess reliability, and understand performance and feature use.
Protect accounts, users, systems, and third parties; prevent abuse and fraud; moderate communities; and enforce agreements.
Send requested updates, transactional messages, security notices, and permitted marketing communications.
Meet legal obligations, resolve disputes, and maintain appropriate business records.
We limit access and processing according to the task and applicable law. Ordinary service operation does not require a separate approval for every technical step. Optional uses, sensitive processing, new incompatible purposes, and permissions requiring consent remain subject to the relevant choices and legal requirements.
4. AI and automated processing
Some Services use AI or automated processing to analyze, translate, summarize, generate, rank, or assist with information. Depending on the feature, processing takes place on your device or through contracted providers receiving the inputs needed for the task. We do not represent all AI processing as local.
We do not use customer-submitted content to train general-purpose AI models or enable optional provider sharing for that purpose. Providers may still process or retain information to deliver the requested feature, maintain security, prevent abuse, or comply with law under their applicable arrangements. No-training does not mean no processing or zero retention.
Outputs may be inaccurate. Review them before consequential use. Where applicable law gives rights concerning automated decisions or profiling, you may use the Contact section to exercise those rights. This Policy does not authorize an otherwise unlawful automated decision.
5. When information is disclosed
We disclose information as appropriate to the function and permitted by law:
To service providers supporting hosting, storage, communications, authentication, payments, AI processing, security, analytics, and support, with access and contractual restrictions appropriate to their role.
To a third-party service, destination, or recipient you connect, select, instruct, or authorize. Independent providers may act under their own privacy policies.
To other users or organizations when you choose community, group, collaboration, or sharing features, according to the relevant audience controls. An organization's administrators may access information within its managed workspace according to its arrangements.
To professional advisers or authorities when reasonably necessary for legal obligations, legitimate investigations, protection of rights, or safety, subject to lawful limits.
In a proposed or completed business transfer, with appropriate confidentiality and safeguards. Any successor remains subject to applicable privacy duties; a transaction is not permission to disregard prior commitments.
We do not sell personal information or share it for cross-context behavioral advertising or targeted advertising. We do not provide customer content to third parties for their general-purpose AI training. We may use genuinely deidentified or aggregated information for legitimate analysis and improvement, taking reasonable measures to prevent reidentification and not attempting it except where law permits for protective purposes.
6. Cookies, local storage, and communications
Websites and apps may use cookies, local storage, and similar technologies for essential operation, authentication, preferences, security, and usage measurement. Where required, we request consent before nonessential technologies operate. You can use available consent controls and browser settings; blocking essential storage may affect functionality. We honor legally required privacy preference signals where applicable.
You may unsubscribe from promotional emails using their unsubscribe mechanism or use the Contact section. Essential account, transaction, legal, or security messages may still be sent. Device and in-app controls govern notification permissions where offered. Permission for notifications is separate from permission for location, microphone/camera access, or unrelated optional processing.
7. Retention and security
We retain information only for as long as reasonably needed for its purpose, the relationship, legitimate security and business needs, and applicable legal obligations. Relevant factors include account status, the type and sensitivity of information, support and troubleshooting needs, contractual commitments, statutory recordkeeping, and limitation periods. Local records can follow the retention settings or plan disclosed in the relevant Service. We do not apply one fixed deletion period to all Services or all information.
When information is no longer needed, we delete or deidentify it as appropriate. Backup copies may remain until ordinary backup expiration, with access restricted and continued use limited to restoration, security, or legal necessity. A legal hold may require longer retention. A restored backup must remain subject to applicable deletion requirements. Existing more specific retention commitments remain applicable to the information and processing they cover unless lawfully changed.
We use reasonable administrative, technical, and organizational safeguards appropriate to the information and risk. No system, transmission, or storage method can be guaranteed completely secure. We respond to security incidents and provide notices where required by law. This Policy is not a promise of certification or a particular security standard we have not expressly undertaken.
8. Your choices and rights
You may request access to, correction of, or deletion of your personal information and account through the Contact section or available controls. Depending on your location and applicable law, you may also request a portable copy, object to or restrict processing, withdraw consent, appeal a decision on your request, or complain to the relevant supervisory authority. We do not discriminate against you for exercising applicable privacy rights.
We may reasonably verify your identity and an authorized agent's authority without requesting unnecessary information. We respond within applicable legal time limits. We may retain limited information for legal obligations, security, fraud prevention, claims, dispute resolution, and necessary backup expiration. If a request cannot be fulfilled in full, we explain the lawful basis as required. Withdrawal does not invalidate lawful earlier processing, but may affect features that require the information.
For locally stored data, device/browser deletion controls may be necessary because we may not hold a server copy. Deleting a Runway Hero account does not automatically delete third-party accounts, information already exported to independent recipients, or cancel store-managed subscriptions. We assist with processing under our control as required; client-controlled information requests may need to go to the relevant business client.
9. International processing and legal grounds
Runway Hero is based in the United States. Services and providers may process information in the United States and other countries with different privacy laws. Where applicable law requires a transfer mechanism or additional safeguards, we use the required arrangements before making that transfer. Use the Contact section for information about safeguards applicable to your information. Using a Service is not a blanket waiver of international-transfer protections.
Where a legal basis is required, we rely on performance of a contract or requested precontractual steps, legal obligations, consent for processing requiring it, and legitimate interests assessed against your rights. Those interests include providing and securing Services, responding to requests, preventing abuse, and proportionate business administration and improvement. We do not rely on general legitimate interests to bypass permission required for sensitive information or a particular feature. We identify additional grounds and notices where required.
10. Adults, other services, and changes
Our Services are intended for adults aged 18 and over. We do not knowingly solicit personal information from children. Use the Contact section if you believe a child provided information contrary to this Policy so we can investigate and take appropriate action. Age restrictions do not excuse applicable duties concerning information we actually hold.
Independent websites, stores, integrations, and recipients have their own policies. Review them before connecting or sharing. Business clients' services may follow their own notices and agreements as described in Section 1.
We will update this Policy when needed, identify the effective date, and provide notice of material changes as required. We obtain any legally required consent before materially different uses of previously collected information. A new product is not permission to use unrelated historical information without a lawful basis. Questions and requests may be submitted through the Contact section.
Contact
Runway Hero LLC, doing business as Runway Hero
Email: info@runwayhero.com
Use this contact for questions about this Policy, privacy requests, appeals, or concerns about our handling of personal information. Include enough information to identify the relevant Service and request, but do not send passwords or unnecessary sensitive information.
Business mailing address: 149 Pelham Island Road, Wayland, MA 01778, United States.