Privacy, in plain English.

What we collect

• When you send a brief: your name, email, brand or website, optional selected plan, request type, campaign context and your note. We use this to reply and get started.
• When you book a call: your name, email, brand or website, optional selected plan and notes, the time you picked and your time zone. We use this to prepare for and hold the call, and to follow up about it.
• When you request a resource or launch notification: your email, the item and version requested, campaign labels supplied with the form, request and confirmation timestamps, and any optional update preference. We use these to deliver what you requested and manage the relationship in our private CRM. We record when access is requested, not whether you read the file.
• When you buy a product: Lemon Squeezy handles checkout. Verified, mapped order events may provide your contact details, product, currency, paid amount, order status and refunds for delivery, support and recordkeeping. We do not receive your full card details.
• When you email us: whatever you choose to send.
• Server logs: our host keeps standard request logs (such as IP address, page requested and browser type) for security and to keep the site running. We use your IP address to limit repeated booking attempts.

What we don’t do

• No advertising pixels, tracking cookies, fingerprinting or cross-site identifiers. We count submitted requests, confirmed calls and operational failures, and record whether enquiries become clients. We may retain campaign labels supplied with your request.
• We don’t sell or rent your details. Download delivery and product-specific launch requests are separate from optional marketing. We only add you to general resource/product updates when you explicitly opt in and confirm that choice. You can unsubscribe at any time.

Who processes it

The site runs on Railway. Brief and booking confirmations are sent through Resend, an email delivery service. Paid products use Lemon Squeezy. Resource contacts, consent events and product order references are stored in our private Runbase CRM on Railway. Owner admin uses an essential, secure sign-in cookie; it is not an advertising cookie. Booking and enquiry details are stored in PostgreSQL on Railway and in our inbox. Google Calendar and Google Meet check availability, hold invitations and provide video meetings. Availability checks use busy times, not the titles or contents of your other events.

How long we keep it

Booking personal data is removed 30 days after the call. Enquiry personal data is removed after 90 days without activity. Derived job and delivery records are removed with the corresponding request. Unresolved requests and failed operations are held for repair until resolved, with operational alerts. Security rate-limit records expire after one hour. Inbound message bodies are processed for forwarding and are not permanently stored by our application. Emails stay in our inbox for as long as we have a reason to keep them, such as an ongoing conversation or a client relationship.

Resource-only contact data is removed after 90 days without activity unless you have confirmed updates or have an active qualified/client relationship. Unresolved delivery operations are held for repair. Requests and related personal event/delivery records expire with the contact. A minimal hashed suppression record may remain to respect an unsubscribe; product/accounting records can have separate retention needs.

Sales and client records

We keep a private record of business enquiries, agreed scope, payment references and delivery activity to manage conversations and fulfil accepted work. Active client and billing records are retained for those purposes and applicable recordkeeping obligations. We keep only the contact information needed to respect objections to outreach. Ask us to review or remove your information using the address below; accounting and payment records may have separate retention requirements.

Motion preferences

You can reduce decorative motion using the footer control. That preference is stored on your device and is not sent with your forms. We also respect your device’s reduced-motion setting.

Your choices

Email hello@runbase.co to see, correct or delete what we hold about you. We’ll reply within a few working days.