1. Information We Collect
We collect information you provide directly to us when you create an account, use our services, or communicate with us. This includes:
- Account Information: Name, email address, company name, and password
- Billing Information: Payment card details (processed securely by Lemon Squeezy, our Merchant of Record)
- Usage Data: AI agent configurations, policy definitions, and decision logs
- Technical Data: IP addresses, browser type, and device information
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent security incidents
3. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Audit logs are retained according to your subscription plan's retention period (90 days to 2 years). After account deletion, we may retain certain information as required by law.
4. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS) and at rest
- Secure API key hashing with per-organization salts
- Regular security assessments and penetration testing
- Access controls and audit logging for internal systems
5. Data Sharing
We do not sell your personal information. We may share information with:
- Payment Processor (Lemon Squeezy): Lemon Squeezy, LLC acts as our Merchant of Record. When you subscribe, Lemon Squeezy collects and processes your payment information directly. Lemon Squeezy's privacy policy applies to payment data. We share your email address and subscription details with Lemon Squeezy to process payments and manage subscriptions.
- Service Providers: Third parties who assist in operating our Service (e.g., hosting, analytics)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
6. Your Rights
Depending on your location, you may have rights to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict certain processing
- Data portability (receive your data in a structured format)
To exercise these rights, contact us at support@runplane.ai.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.
8. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service before they become effective.
10. Contact Us
For questions about this Privacy Policy or our data practices, contact us at:
Email: support@runplane.ai
Address: Runplane Inc., San Francisco, CA 94105