Privacy Policy

Information We Collect

We collect information you provide directly when you create an account, and information generated automatically as you use the product.

• Account information. When you sign up, we collect your name, email address, and password. Authentication is handled by Clerk. Your credentials are stored and managed by Clerk, not by Runframe directly.
• Organization and team data. When you set up your organization, invite teammates, or configure on-call schedules, we store that configuration data to provide the service.
• Usage data. We collect information about how you interact with the product: pages visited, features used, and actions taken. This helps us understand what is working and what needs improvement.
• Slack workspace data. If you connect Runframe to your Slack workspace, we receive information necessary to operate the integration: workspace ID, channel IDs, and user IDs for members you add to Runframe. We do not read the contents of your Slack messages beyond what is required to process incident alerts and notifications.
• Incident data. The incidents, postmortems, timelines, and on-call records you create in Runframe are stored and associated with your organization.

How We Use Your Information

We use the information we collect for three core purposes:

• To provide the service. Your data is what powers Runframe. We use it to operate incidents, on-call schedules, escalation policies, and notifications.
• To improve the product. Aggregate usage data helps us understand which features are used most, where users get stuck, and where to focus engineering effort.
• To communicate with you. We send transactional emails (incident alerts, on-call notifications, account notices) and, if you opt in, product updates. You can unsubscribe from product updates at any time.

We do not use your data to train machine learning models or build advertising profiles.

Data Sharing

We do not sell your data. We do not share your data with third parties for their own marketing or advertising purposes.

We share data only with the service providers necessary to run Runframe:

• Clerk: authentication and user management. Stores your login credentials and session data.
• Railway: cloud hosting and database. Your application data is stored on Railway's infrastructure.
• Slack API: when you enable the Slack integration, data is exchanged with Slack to deliver notifications and receive alerts.
• Payment processor: billing information (card details) is handled directly by our payment processor. Runframe never stores your raw payment card data.

Each of these providers operates under their own privacy policies and data processing agreements. We require that they handle your data only as necessary to provide their services to us.

We may disclose your information if required by law or to protect the rights and safety of Runframe, our users, or others.

Data Retention

We keep your data for as long as your account is active. If you delete your account, we will delete your personal data and organization data within 30 days, except where we are required to retain it for legal or compliance reasons.

You can request deletion of your data at any time by emailing [email protected]. We will confirm receipt and process the request within 30 days.

Security

We take reasonable steps to protect your data:

• All data is transmitted over HTTPS.
• Data at rest is encrypted by our hosting provider.
• Access to production systems is restricted to authorized personnel only.
• Authentication is managed by Clerk, which handles credential hashing, session management, and brute-force protections.

No system is perfectly secure. If you discover a security issue, please contact us at [email protected].

Your Rights

You have the right to access, correct, or delete the personal data we hold about you. Specifically:

• Access. You can request a copy of the personal data we hold about you.
• Correction. If any information is inaccurate or incomplete, you can ask us to correct it. Many fields can be updated directly from your account settings.
• Deletion. You can request that we delete your personal data. Note that deleting your account will also remove your organization's data from Runframe.
• Portability. You can request an export of your data in a machine-readable format.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

Cookies

We use a minimal set of cookies:

• Authentication session. A cookie set by Clerk to keep you logged in. This is strictly necessary for the service to function.
• Theme preference. A cookie to remember whether you prefer light or dark mode.
• Analytics. We use Google Analytics to understand how visitors interact with our marketing pages. Google Analytics sets cookies to distinguish users and sessions. No personally identifiable information is sent to Google Analytics. You can opt out using the Google Analytics Opt-out Browser Add-on.

We do not use advertising cookies or third-party tracking pixels beyond Google Analytics.

Changes to This Policy

We may update this privacy policy from time to time. For minor changes, we will update the “Last updated” date at the top of this page. For material changes that affect your rights or how we handle your data, we will notify you by email before the changes take effect.

Continued use of Runframe after the effective date of a policy update constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or how we handle your data, reach out at [email protected].

Runframe, Inc.
[email protected]