Privacy Policy

Information you give us:

• Account information: your name, work email, phone number, job title, and organization.
• Organization information: company details, capabilities, products, certifications, locations, images, videos, documents, and team members.
• Activity: posts, Board posts, buyer requests, responses, messages, introductions, and your answers to check-ins such as "Did you meet?"
• Documents you upload to your document room, Document Check, or the company toolkit.
• Verification information, such as registration documents and proof that you work for your organization.
• Payment information. Card details go directly to Stripe, our payment processor. We receive limited details, such as the card brand, the last four digits, billing address, and your plan.
• Messages you send us, such as support emails and feedback.

Information collected automatically:

• Device and log data, such as IP address, browser type, pages viewed, dates and times, and the page that referred you.
• Cookies and similar technologies that keep you signed in, protect the Service, and remember your settings, and analytics that help us understand how the Service is used.
• Page view records. When a signed-in person opens a company page, we count the view, and we record which organization viewed it only if that organization's viewer setting is on. Whether your organization's name is shown to the company follows your viewer setting.
• Email delivery data, such as whether an email was delivered.

Information from other sources:

• Public sources we use to create and check company pages, such as company websites, public government registrations and databases (for example SAM.gov, state business registries, the SBA certification search, and USAspending.gov), and public industry lists.
• Business contact details published by organizations, such as names, titles, work emails, and phone numbers of company contacts.
• Other users, for example when a user introduces you or invites you to join their organization's account.
• Service providers, such as Stripe, which tells us whether a payment succeeded.

We use information to:

• provide and operate the Service, including company pages, the lists of organizations, the Board, messages, introductions, and the toolkit;
• create and maintain company pages from public information and invite organizations to claim them;
• verify organizations and run Company checks;
• match organizations with opportunities, partners, and funding programs;
• send service emails, alerts, introductions, check-ins, and newsletters;
• process payments and manage plans;
• run AI features at your request;
• provide support and respond to requests;
• protect the Service and its users, prevent fraud and abuse, screen against sanctions lists, and enforce our Terms;
• comply with the law; and
• understand how the Service is used and improve it, mainly through aggregated statistics.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use your content to train AI models.

When you use an AI feature, the text and documents you submit are sent to our AI provider, currently Anthropic, to produce the result. Our AI provider processes this content under business terms that do not allow it to train its models on the content. We store the results so you can see them. For Document Check, the results name the file and the page where each issue appears, and we keep short excerpts quoted from your documents, which the check reads, until the files are deleted. AI results are information for you to review. We do not use them to make decisions about you that have legal or similarly significant effects.

• With other users, according to your settings: the public parts of your page, the parts shown only to signed-in people with those people, Board posts and requests on the Board, and messages with the people you send them to. If your viewer setting is on, the companies whose pages you view can see your organization's name. Every account has this setting off by default.
• With service providers who work for us under contracts that limit their use of the information. They include providers for hosting and databases (Google Cloud and Firebase, Vercel), payments (Stripe), AI (Anthropic), email (Resend and Microsoft 365), and analytics (Google Analytics).
• For legal and safety reasons: to comply with law or legal process, to protect rights, safety, and property, to investigate fraud or abuse, and to meet export control and sanctions obligations.
• In a business transfer, such as a merger, acquisition, reorganization, or transfer to a company that operates the Service.
• With your consent or at your direction, for example when you send documents to a buyer.
• In aggregated or de-identified form that does not identify anyone.

We use publicly available business information to create unclaimed company pages and to invite organizations to claim them. Any organization or person can ask us to correct or remove a page or a contact detail at any time, using the removal link on the page or in our emails, or by writing to team@autonomyrunway.com. When we remove a page because of a request, we take it off the Service and keep its record, hidden, with the request, so that we do not re-create the page or contact you again. Every invitation email we send includes a way to opt out.

• Edit your profile and page at any time.
• Control your page's visibility, sharing, and viewer settings.
• Unsubscribe from newsletters and marketing emails using the link in each email. We will still send service emails about your account, security, and purchases.
• Close your account in your account settings or by writing to team@autonomyrunway.com.
• Control cookies through your browser settings. Blocking essential cookies may prevent sign-in.

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct it;
• delete it;
• receive a copy in a portable format;
• object to or restrict certain uses;
• withdraw consent where we rely on consent; and
• not be treated differently for using these rights.

To use these rights, write to team@autonomyrunway.com. We may need to verify your identity. You may use an authorized agent. We respond within the time the law requires, generally within 30 days, or within 45 days for California residents. We aim to honor these requests for all users, wherever they live.

• Autonomy Runway is the controller of your personal information. You can reach us at team@autonomyrunway.com.
• We rely on these legal bases: performing our contract with you, which is how we provide the Service; our legitimate interests in operating, securing, and improving the Service, in creating business listings from public information, and in contacting organizations about their listings, limited to business contact details and always with an easy way to opt out; your consent, where the law requires it; and our legal obligations.
• You may object to processing based on legitimate interests at any time.
• You have the right to complain to your local data protection authority.
• We are based in the United States, and your information is processed there. Where the law requires, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses offered by our service providers.

In the past 12 months we have collected these categories of personal information: identifiers (such as name and email address), professional or employment information (such as job title and organization), commercial information (such as plans purchased), and internet activity (such as pages viewed). We collect them from the sources described in Section 1, use them for the purposes in Section 2, and disclose them to the recipients in Section 4. We do not sell or share personal information as those terms are defined in California law, and we do not use sensitive personal information to infer characteristics about anyone. You may use the rights described in Section 7.

• Account and page information: while your account is active. After you close your account, we delete your account information right away. If you own your organization's account, its page stays as an unclaimed page, without your contact details, unless you ask us to remove it. We keep what you already sent or posted, to us or to other users, such as messages, requests, and responses; messages stay readable to the other side for 90 days. We also keep copies in backups, which are overwritten on a regular schedule, and records we must keep for legal, tax, accounting, dispute, or fraud-prevention reasons. Payment records are kept for as long as tax and accounting laws require.
• Unclaimed pages: until they are removed or are no longer relevant.
• Documents in your document room: until you delete them or close your account.
• Document Check: the files you upload are deleted 30 days after your report, or 30 days after you last changed them when a check never ran, and the short quoted excerpts are deleted with them. The results are kept until you delete them or close your account.
• Removal records: kept so we can honor the request in the future.

We use reasonable safeguards, including encryption in transit, access controls, private storage for documents, and limited access by our staff. No method of transmission or storage is completely secure. Please protect your sign-in details. If a security incident affects your personal information, we will notify you as the law requires.

The Service is not for anyone under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.

We may update this Privacy Policy. If a change is material, we will notify you by email or on the Service before it takes effect.

Autonomy Runway6520 Lonetree Blvd #1008, Rocklin, CA 95765Email: team@autonomyrunway.com