Skip to main content

Privacy Policy

Last updated: February 2026

1. What we collect

When you use Runway, we collect the information you provide during the assessment — job title, industry, seniority level, task weights, and environment settings. If you create an account, we also store your email address and display name.

We do not collect or store passwords directly. Authentication is handled by Supabase Auth, which manages credentials on our behalf.

2. How we use your data

  • To compute your AI exposure scores and personalised pathways
  • To generate LLM-powered analysis (sent to Anthropic's API for processing)
  • To benchmark your role against market data
  • To send reminder emails if you opt in
  • To improve the scoring engine and assessment experience

3. Third-party services

We use the following third-party services:

  • Supabase — database and authentication
  • Anthropic (Claude) — LLM-powered career analysis
  • Stripe — payment processing (we never see your full card number)
  • Sentry — error tracking (no personal data sent)
  • PostHog — product analytics (no session recordings, no personal data). Events include: assessment start/completion timing, industry category, tab views, and error reports. No scores, names, or email addresses are sent.

4. Cookies & tracking

Runway uses essential cookies for authentication (Supabase session) and theme preferences. We use PostHog for anonymous product analytics only when you consent. We do not run advertising trackers or sell your data.

5. Data retention

Assessment data is retained for as long as your account exists. If you delete your account, all associated data (profile, assessments, journeys) is permanently removed within 30 days.

6. Your rights (GDPR & CCPA)

You have the right to:

  • Access — request a copy of all data we hold about you
  • Rectify — correct inaccurate data via your account settings
  • Delete — permanently delete your account and all data
  • Portability — export your assessment data as PDF
  • Object — opt out of analytics tracking at any time

To exercise any of these rights, use the account deletion feature in your dashboard or contact us at the email below.

7. Security

We use row-level security policies in our database so users can only access their own data. All traffic is encrypted via HTTPS. API endpoints are rate-limited to prevent abuse.

8. Contact

For privacy-related questions or data requests, email us at privacy@yourrunway.app.