Privacy Policy

Last updated:

1. Introduction

This Privacy Policy explains how Runa ("we", "us", or "our") collects, uses, and protects your personal information when you use our bookmarking and knowledge management service ("the Service"). We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our authentication provider (Clerk). You may also provide a profile picture and display name.

User Content

We store the links, bookmarks, notes, tags, and other content you save through the Service. This includes URLs, page titles, descriptions, extracted text content, and metadata fetched from saved pages.

Third-Party Data

If you connect third-party services (such as X/Twitter), we collect bookmarks and related data from those services as authorized by you.

Usage Data

We collect information about how you use the Service, including pages visited, features used, search queries, and interactions with AI features.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Process and store your saved links, bookmarks, and content
  • Power AI features including search, summarization, auto-tagging, and chat
  • Sync bookmarks from connected third-party services
  • Process email forwarding to save content to your library
  • Process subscription payments and billing
  • Send important service-related communications
  • Detect and prevent fraud, abuse, and security issues

4. AI Processing

Our AI features process your saved content to provide functionality such as search, summarization, auto-tagging, and conversational chat. Your content may be sent to third-party AI providers (such as OpenAI) for processing. We do not use your content to train AI models. AI providers process your data according to their respective privacy policies and data processing agreements.

5. Data Storage and Security

Your data is stored securely using Convex, our backend infrastructure provider. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

6. Data Sharing

We do not sell your personal information. We may share your data with:

  • Service providers: Third-party services that help us operate the Service (authentication, hosting, payment processing, search, AI providers)
  • Legal requirements: When required by law, regulation, or legal process
  • Safety: To protect the rights, property, or safety of our users or the public

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your saved content
  • Disconnect third-party integrations at any time
  • Opt out of non-essential communications

8. Chrome Extension

Runa offers an optional Chrome browser extension that lets you save pages to your library. The extension operates as follows:

Data Collected

When you explicitly save a page (via right-click context menu, keyboard shortcut, or the popup button), the extension sends only the URL of that page to our servers at api.onruna.com. No browsing data is collected passively. The extension does not track your browsing history, read page content, or monitor your activity.

Local Storage

Your API key is stored locally on your device using chrome.storage.local. It is never transmitted to any third party and is only used to authenticate requests to the Runa API.

Permissions

  • activeTab:Access the current tab's URL when you trigger a save action
  • storage: Store your API key locally on your device
  • contextMenus:Add "Save to Runa" to the right-click menu
  • scripting: Display a brief toast notification on the page confirming your save
  • host_permissions (api.onruna.com): Send saved URLs to the Runa API

Remote Code

The extension does not load or execute any remote code. All extension code is bundled locally. The only network requests made are API calls to api.onruna.com when you explicitly save a page.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising trackers. Analytics data is collected to improve the Service and is not shared with advertisers.

10. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal information and saved content within 30 days, except where retention is required by law. Backups may contain your data for up to 90 days after deletion.

11. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or your data, please contact us at support@onruna.com.