1. Operator and roles
Runstamp is operated by The Plain Works Co.,Ltd. Privacy requests go to hello@runstamp.com.
We control public-site, documentation, account, license, support, status, and service-administration data. For personal data submitted to a hosted feature on a customer's instructions, Customer is controller/business and we are processor/service provider under the DPA.
2. Scope, market, and local-only boundary
This Policy covers runstamp.com, hosted accounts/features, licensing, support, public Mintlify documentation, Better Stack status services, and communications. Hosted/commercial services are business-to-business offerings in the United States and Canada, excluding Quebec, and are not offered or targeted in the EU, EEA, or UK.
Local Apache-2.0 packages can run entirely in Customer infrastructure. When local code does not call a Runstamp hosted endpoint, telemetry service, support channel, or managed integration, we do not receive or retain its source documents, prompts, or outputs.
3. Data collected
- Account and organization: name, business email, organization, role, auth identifiers, membership, settings, and consents.
- License and entitlement: license/customer IDs, plan, scope, allowed features/formats, issue/expiry, validation events, and protected keys/certificates. Offline validation need not send document data or a validation request.
- Hosted Customer Content: job inputs, documents, templates, configurations, generated artifacts, approvals, connector payloads, and support uploads selected by Customer.
- Operational data: usage counters, job/execution identifiers, receipts, audit events, webhook destinations/delivery status, errors, IP/device data, and security logs.
- Billing: Paddle subscription, transaction, invoice, tax, refund, and entitlement references, but no complete card or bank credentials.
- Documentation/status/support: public page requests and analytics; support messages/attachments; email entered for Better Stack status subscriptions.
4. Restricted data
Hosted Runstamp is not designed for restricted data: protected health data; full card data or bank credentials; identity documents/government identifiers; passwords, private keys, access tokens, or session secrets; biometrics; precise geolocation; FCRA or GLBA data; children's data; classified/export-controlled data; or highly sensitive genetic, health, or employment data. Do not submit it without a separate written agreement approving the category and controls. Local use does not authorize data handling prohibited by law or an applicable license.
5. Uses and disclosure
We use data to authenticate, issue and verify entitlements, execute selected hosted operations, deliver artifacts and webhooks, maintain audit/usage records, bill, support, secure, debug, communicate status, analyze public/product performance, prevent fraud/abuse, enforce agreements, and comply with law.
Personal data is not sold and is not shared for cross-context behavioral or targeted advertising. We do not make solely automated high-impact decisions.
We disclose data to providers on the Subprocessors page, Paddle as independent merchant of record, customer-selected integrations, advisers under confidentiality, authorities where legally necessary, and transaction successors under appropriate protection. GitHub/npm process public repository/package activity under their own terms.
6. AI
Runstamp does not currently send hosted Customer Content to OpenAI, Gemini, or Anthropic as a core subprocessor. Examples may let customers connect their own provider locally or with customer-supplied credentials. In that case the customer selects and controls the provider. We will update the Subprocessors page and applicable feature notice before a Runstamp-managed AI provider processes hosted Customer Content.
7. Cookies, documentation, and analytics
Necessary cookies/local storage support authentication, security, routing, and preferences. PostHog measures pseudonymous product usage and sanitized application diagnostics in its U.S. project. Browser telemetry uses memory-only persistence, omits IP addresses, email, names, document content, URL queries, and authentication tokens, and honors Global Privacy Control, Do Not Track, and saved analytics opt-outs. Diagnostics omit raw exception messages, stacks, and request data.
Mintlify hosts public documentation and may process request/analytics logs. Better Stack monitors endpoints, hosts the public status page, and processes email addresses submitted for status updates. Optional analytics follows displayed consent choices and Global Privacy Control where technically detected. The former Cookie Policy is incorporated here.
8. Retention
| Data | Normal period |
|---|---|
| Local-only source documents and outputs never transmitted to Runstamp | Not collected or retained by us |
| Active hosted account/organization data | Life of account or contract |
| Accepted authenticated hosted-account deletion | Scheduled without a discretionary grace period |
| Unbound execution input/artifact staging | 24 hours |
| Generated hosted artifacts | 7 days unless plan/Order Form states otherwise |
| Usage and organization audit records | 24 months |
| Successful/failed webhook delivery records | 60 days / 90 days |
| Security/authentication logs | 90 days unless needed for an incident |
| Isolated backups after live deletion | Overwritten within up to 35 days |
| Support records | 24 months after closure or last activity |
| Billing/tax/accounting records | 5 years or longer if mandatory law requires |
| Inactive marketing lead | 24 months after last meaningful activity |
| Opt-out suppression | Minimal record while needed to honor the opt-out |
Legal holds, security investigations, fraud prevention, disputes, and mandatory records may extend affected data only. Backup data is isolated from ordinary use and not restored merely to retrieve deleted content.
9. International processing
We operate from Korea and use U.S., Korean, and global infrastructure providers. Data may be processed outside your state, province, or country. We use contracts, access controls, encryption, minimization, and provider review appropriate to the processing. Customer Personal Data transfers are addressed in the DPA.
10. Rights
Depending on applicable U.S., Canadian, or Korean law, you may request access, correction, deletion, portability, restriction, disclosure information, consent withdrawal, marketing opt-out, or appeal. We may verify identity, jurisdiction, and agent authority and will not discriminate for exercising a right.
For Customer Personal Data, contact the relevant Customer first; we assist under the DPA. Send requests/appeals to hello@runstamp.com. You may complain to a competent regulator, including Korea's Personal Information Protection Commission or Canada's Office of the Privacy Commissioner where applicable.
11. Security, children, and changes
We use safeguards described in the Security Overview, but no system is perfectly secure. Runstamp hosted services are for users at least 18 and do not permit children's data. We may update this Policy and will post the new date and provide reasonable notice of material adverse changes where appropriate.
12. Contact
Privacy and legal: hello@runstamp.com