Privacy Policy

Effective Date: December 22, 2025

At Runframe, your privacy is important to us. This policy explains how we collect, use, and protect your data across our incident management platform and integrations.

1. Information We Collect

Personal & Account Details

  • Name, email address, and company information
  • Login method (e.g., email/password, SSO providers)
  • Role, team assignments, and contact information
  • Billing information (processed securely through third-party payment processors)

Incident & Operational Data

  • Incident reports, severity levels, and status updates
  • Timeline events, action items, and remediation steps
  • Team communications and collaboration data
  • Post-mortem documents and incident analysis
  • Integration data (Slack messages, PagerDuty alerts, GitHub issues)
  • Uploaded files, screenshots, and system logs

Technical & Usage Data

  • Platform usage patterns and feature interactions
  • Incident response metrics and performance data
  • API calls, webhook events, and integration usage
  • Browser type, operating system, and device information
  • Session data and interaction patterns

Website Analytics

  • Anonymized browser data such as IP address (short-lived)
  • Device type, visited pages, and referrer sources
  • Session duration and user journey analytics

2. How We Use Your Information

To Provide Core Features

Including incident management, team coordination, automated workflows, and compliance documentation.

AI-Powered Features

Your incident data and documents may be processed using Runframe's AI to generate post-mortems, classify incidents, suggest remediation steps, or provide response recommendations.

Analytics and Improvements

We use aggregated data to improve usability and performance. This includes incident response metrics, feature usage statistics, and platform performance data. We may also share fully anonymized, aggregated insights publicly to help others understand incident management trends. No personal or incident-specific data is ever included.

Communications

We may send in-app notifications, email alerts, or Slack messages related to your incident management activities, system status, or account updates.

3. Third-Party Services

We partner with trusted third-party vendors who are contractually obligated to handle your data securely and only as necessary:

Authentication & Identity

Services such as SSO providers, SAML identity providers, and similar authentication systems help you log in securely.

Hosting & Storage

Your data is stored and processed using trusted cloud infrastructure. Depending on the provider, your information may be processed in the United Kingdom, European Union, or United States.

Analytics

We use analytics tools from third parties to understand platform usage patterns, improve functionality, and monitor performance. This may include anonymized website or app data.

AI Tools

Some incident analysis, post-mortem generation, or predictive insights may use third-party AI models or APIs. These are only used to enhance platform features and are subject to strict confidentiality and security requirements.

Integration Partners

We integrate with incident response and development tools (Slack, PagerDuty, GitHub, etc.) to provide seamless incident management workflows.

4. Data Retention

We retain your data only as long as needed to provide services, or until you request deletion. Backup and archival copies may be retained temporarily for legal or operational purposes.

Specific retention periods:

  • Active accounts: Data retained as long as account is active
  • Cancelled accounts: 30 days to export data, then deletion
  • Incident data: Retained according to your organization's policies and legal requirements
  • Analytics data: Aggregated and anonymized after 90 days
  • Backup data: Up to 12 months for disaster recovery purposes

5. Data Security

We implement strong encryption, access controls, and monitoring to protect your data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Our security measures include:

  • End-to-end encryption for data in transit and at rest
  • Regular security audits and penetration testing
  • Immutable audit logs for all system actions
  • Role-based access controls with principle of least privilege
  • Multi-factor authentication for administrative access
  • SOC 2 Type II compliance and security certifications

6. Your Rights

Access

You can access your data via the platform or by contacting us.

Correction

You can update your personal and incident details anytime.

Deletion

You may request complete deletion of your account and associated data using the email below.

Portability

Upon request, we can provide a structured export of your data, including incident reports and analytics.

No Selling

We do not sell your personal data to advertisers or third parties.

7. Cookies and Tracking

Our website uses cookies and similar technologies to:

  • Analyze visitor traffic and performance
  • Remember preferences and authentication status
  • Track page interactions anonymously
  • Provide essential platform functionality

You may disable cookies in your browser settings at any time, though this may affect website functionality. Essential cookies for platform operation cannot be disabled.

8. Children's Privacy

Runframe is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new effective date. Continued use of the platform after changes implies acceptance.

11. Contact Us

If you have any questions, data requests, or privacy concerns, please reach out to us at:

© 2026 Runframe. All rights reserved.

    Privacy Policy - Runframe | Runframe