Privacy Policy

• Account data — name, handle, email, avatar, banner and bio, provided by you or your Google sign-in.
• Content you create — workflows, prompts, variables, uploaded images and other files.
• Run data — the inputs you submit, the outputs generated, timestamps, and usage/cost metering.
• Billing data — balance, spend caps and transaction records. Card details are handled by our payment processor, not stored by us.
• Device and usage data — IP address, browser, pages viewed and interactions, collected via analytics tools.
• Email preferences — if you opt in to receive workflows, prompts and creator drops.

• To run workflows and return outputs to you.
• To operate accounts, creator profiles, publishing, subscriptions and billing.
• To measure product usage, debug issues, and improve Runbase.
• To send transactional messages, and marketing emails only if you opted in.
• To prevent abuse, fraud and misuse, and to comply with law.

We use cookies and similar technologies for essential functions (sign-in sessions, security) and for analytics and measurement. Analytics and marketing tools we may use include Google Analytics, Mixpanel and the Meta pixel. These providers may set cookies and receive device, page and event data, and may use it to measure ad performance.

You can block or delete cookies in your browser, use Google’s opt-out tools, or enable a Global Privacy Control signal, which we honor as an opt-out of sharing for targeted advertising where applicable.

Running a workflow sends your inputs to third-party model and infrastructure providers so the output can be generated. These include our hosting and database provider, AI model providers (text and image generation), and web page extraction services used by URL inputs. Providers process this data on our instructions to deliver the service.

• Generated images are hosted by our image provider and are typically available for 30 days. Download anything you want to keep.
• Account, workflow and run records are kept while your account is active, and deleted or anonymized after account deletion, except where we must retain them for legal, tax or fraud-prevention reasons.

We do not sell your personal information for money. We share data with service providers described above, with other users when you publish a workflow or profile publicly, and where required by law or to protect our rights. If Runbase is involved in a merger or acquisition, data may transfer as part of that transaction.

Access to your private data is restricted at the database level so that your runs, uploads and billing records are visible only to you. We use encrypted connections and signed, expiring URLs for private media. No system is perfectly secure, so please use a strong, unique account credential.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to withdraw consent, and to appeal a denied request. Residents of California and other US states may request details about the categories of information collected and disclosed, and may opt out of targeted advertising. Users in the EEA/UK may object to or restrict certain processing and may lodge a complaint with their supervisory authority. We do not discriminate against you for exercising these rights.

To make a request, email privacy@runbase.io. We may need to verify your identity before acting.

We are based in the United States, and your information may be processed there and in other countries where our providers operate. Where required, transfers out of the EEA/UK rely on Standard Contractual Clauses. Business customers who need a Data Processing Addendum can request one at legal@runbase.io.

Runbase is not intended for anyone under 13, and we do not knowingly collect their information.

We may update this policy. If changes are material, we will update the effective date above and, where appropriate, notify you in the app or by email.