Privacy Policy
Last updated: August 2026
1. Information We Collect
We collect only what we need to provide the Service:
- Account information — your email address and, if you sign in with Google or GitHub, the basic profile information those providers share.
- Usage data — API requests, task records, and technical logs needed to run, bill, and troubleshoot the Service.
- Billing information — payments are handled by our payment processor (Stripe); we receive transaction records but never store your full card details.
2. How We Use Information
We use your information to operate the Service, process your API requests, calculate usage-based billing, provide support, prevent abuse, and send service-related emails. We do not sell your personal information.
3. Data Storage and Security
We keep account and billing records for as long as your account exists and as required for legal and accounting purposes. Data is encrypted in transit and at rest, and internal access is restricted.
4. API Data Processing
RunAPI processes your API requests to route prompts and other inputs to the selected model endpoint and return the resulting output. We process data only as needed to operate the Service, meter usage, and provide support.
Prompt and response payloads are not used to train our models. Task payload content is retained for 30 days after a task reaches a terminal state, then externalized and minimized under our retention policy.
- Prompt payloads are processed transiently and not used for training.
- Task payload content is retained for 30 days after a task becomes terminal, then follows the repository retention policy.
- Provider routing metadata is retained for billing reconciliation.
- Regional processing availability depends on the endpoint and account configuration.
5. Cookies and Tracking
We use cookies that are necessary to sign in, maintain your session, remember your language preference, and keep the Service secure. Our first-party attribution cookies help connect a visit to later account and billing events; they are host-only, use SameSite protections, and are secured in production.
We use privacy-friendly analytics to understand how people use the website and to measure campaigns. Advertising integrations may place cookies on landing pages where they are enabled; those providers handle information under their own privacy policies.
6. Third-Party Services
We use service providers that help us operate the Service, including hosting, payment processing, email delivery, analytics, advertising, and error monitoring.
These providers receive only the information needed to provide their services and handle it under agreements or policies that limit its use. We may also disclose information when required by law or needed to protect the Service.
7. Data Retention and Security
We retain task payload records for 30 days after a task reaches a terminal state. During this window, account administrators can access raw request and response content; task records and billing facts remain available throughout the lifecycle.
When the retention window ends, we verify a complete payload snapshot in encrypted object storage before minimizing the task record. Permanent task records keep status and billing audit facts, while payload content is no longer available in the console. Account and billing records are retained for as long as the account exists and as required for legal and accounting purposes. Data is encrypted in transit and at rest, and internal access is restricted.
8. Your Rights
You can access and update your account information in the console. To request a copy or deletion of your personal data, contact us.
We will respond within a reasonable time, subject to legal retention requirements.
9. International Transfers
We may process personal information in countries other than the country where you live as needed to provide the Service.
When information is transferred across borders, we use safeguards required by applicable data protection law and require recipients to protect it consistently with this Privacy Policy.
10. Children's Privacy
We do not knowingly collect personal information from children who are not permitted to use the Service under applicable law. If you believe a child has provided personal information through the Service, please contact us so we can review and take appropriate action.
We do not knowingly use a child's personal information for purposes outside those described in this Privacy Policy, and we delete it when required by applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date above identifies the latest revision.
When an update takes effect, we publish the current policy on this page.
12. Contact Us
For questions about this Privacy Policy or how we handle your information, please contact us.
We will respond within five business days.