Privacy policy

Who we are

Run it by is a service that lets software agents ask a person for information or an approval through a link. This policy covers two groups: developers who create an account, and the people who open a link and answer.

For answers, the developer who sent the link decides what to ask and what to do with the answers. They are the controller of that data and we process it on their behalf. For developer accounts, we are the controller.

What we collect

Developer accounts: your email address, an optional display name, your plan and billing period, hashed API keys, a sign-in session, and a count of the requests your agents create each month. Payments are handled by Polar, our merchant of record; we never see your card details.

Requests your agents create: the title, the questions, the names, email addresses or phone numbers of the people they name, any metadata your agent attaches, and the webhook address answers go to.

Answers: what the person entered or decided, an optional comment, and the IP address and browser user agent of the device they answered from. We also record when they answered and whether the answer reached the developer's webhook.

Reports: if someone reports a link, we keep the reason, their details and, if they give it, their email address.

People who answer

If you filled a form or answered an approval, the account named on the page and in its footer asked for your answers. Contact them about how they use them; they can also ask us to delete them.

We send your answers to that account and nothing else. We don't build profiles, sell data or show ads. If a link asks you to confirm your email address, we email you a one-time code and keep only a hash of it.

If you think a link is misleading or asks for something it shouldn't, use “Report” at the bottom of the page.

Who we share it with

The developer who sent the link receives the answers, through their webhook, their agent and their dashboard.

Cloudflare hosts the service, stores the data, sends our email and runs the bot check (Turnstile) shown on some open links.

Polar processes payments for paid plans.

PostHog (in the United States) receives usage analytics: which pages are viewed, what is clicked on the site and dashboard, how fast pages load, errors, and counts of requests and answers. On forms it only learns that the page was viewed, how fast it loaded and whether it failed, never the link or what you answered.

We don't share data with anyone else unless the law requires it.

Where it's stored

All data is stored by Cloudflare in one region in the eastern United States. Usage analytics are stored by PostHog in the United States.

How long we keep it

Answers, comments, IP addresses and user agents are deleted 30 days after delivery on the Free plan and 90 days after delivery on Builder. On Pro they're kept until the developer asks us to delete them. We keep a record that an answer happened, without its contents, so counts and decisions still add up.

Sign-in links expire after 15 minutes and sessions after 30 days. Account data is kept while the account exists.

Cookies and storage

The dashboard uses one cookie to keep you signed in. Forms keep an unsent draft in your browser's local storage so a reload doesn't lose your answers; it's removed when you send. PostHog sets an analytics cookie on the site, the dashboard and forms to tell visits apart. We don't use advertising cookies.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Developers can do this for their account by writing to us. If you answered a form, start with the account that asked you, since they decide what happens to your answers; you can also write to us.

Changes

If we change this policy in a way that matters, we'll email account holders before it takes effect. The date at the top shows the last update.

Contact

Write to hello@runitby.app.