Policy / 01

RunRate privacy notice

This notice explains how RunRate processes information for its public website, paid production services, and internal media workflow.

Information you submit

When you use the pilot form, RunRate processes your name, work email, company, website, project brief, selected package, optional source link, order reference, and consent version. We use this information to review the request, take payment where applicable, deliver the selected service, communicate with you, and handle support or refunds.

Stripe payments

Stripe processes card and payment information through its hosted Checkout and customer portal. RunRate does not receive or store full card numbers, CVCs, or other full card credentials. RunRate stores limited Stripe identifiers such as Checkout Session, Customer, Payment Intent, Subscription, Invoice, and payment-status references so that orders, refunds, subscriptions, and webhook events can be reconciled.

Cloudflare and D1

The website and server-side form routes run on Cloudflare Pages Functions. Order and webhook-ledger records are stored in Cloudflare D1. RunRate stores the submitted brief and contact details needed to deliver the service, but does not operate a public customer dashboard or CRM.

Email delivery

Resend processes operational messages sent to RunRate and payment or order messages sent to customers. Your submitted work email may be used as the reply-to address for the order conversation.

Internal publishing workflow

RunRate also operates an internal desktop publishing tool for its own short-form media. Publishing records may include OAuth tokens in protected stores, platform account identifiers, asset hashes, media metadata, staging and release timestamps, approval records, and public URLs. Customer payment data is not used by that publishing workflow.

Retention

RunRate retains order, payment, refund, and accounting records for as long as needed to provide the service, resolve disputes, meet legal and tax obligations, and maintain operational integrity. Briefs and working material are deleted or anonymised when no longer needed, subject to legal and contractual requirements. Stripe, Cloudflare, and Resend may apply their own retention periods.

Your requests

To ask for access, correction, deletion, or clarification, email contact.runrate@gmail.com. Include enough information for RunRate to identify the request without sending card details by email. See data deletion for the request route.

Updates

RunRate may update this notice when the service, processors, or legal requirements change. The current version is published on this page.