Privacy Policy

Last updated: November 2026

What we collect

• Account details: name, email, company, timezone and a hashed password.
• Workflow content: workflow definitions, files you or your integrations upload, collections, run inputs and outputs, and review decisions.
• Billing details, which are handled by Stripe. We never see or store full card numbers.
• Basic technical logs (IP address, request times) for security and abuse prevention.

How we use it

We use your data only to operate RunOCR: to run your workflows, send emails your workflows request, provide support and bill your subscription. We do not sell personal data.

AI processing

When a vision or AI step runs, the relevant image and data are sent to our AI model provider for that request only, with storage disabled. Under the provider's API terms, this data is not used to train models.

Retention

Run history and run files are kept according to your plan's retention period, then deleted automatically. Collections, workflows and components remain until you delete them. Deleting your account removes all of your data.

Security

Traffic is encrypted with TLS. Stored API credentials are encrypted with AES-256-GCM. Reviewer links are random, unguessable tokens bound to a single review.

Contact

Questions or data requests: privacy@runocr.com.