Act One By Runway procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| Data retention | All applicable tiers | medium | “ Please note that certain information may be exempt from such requests under applicable law. For example, we may retain certain information for legal compliance and to secure the Service. We may need certain information to provide the Service to you; if you ask us to delete it, you may no longer be able to use the Service.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Delete your account. You can choose to delete your account by following the instructions here .” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We will retain your information for only as long as necessary to provide the Service and for the other legitimate business purposes set out in this Policy such as safety, security, compliance, and dispute resolution. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, applicable legal requirements, and our legitimate interests. For example, we will retain face scans and voiceprints for no longer than the earlier of the date the initial purpose for collecting the data is satisfied or within three years of your last interaction with us.” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Delete certain personal information we have about you.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ 3.3 Storage. Unless expressly agreed to by Company in writing elsewhere, Company has no obligation to store any of Your Content that you Make Available through the Services. Company has no responsibility or liability for the deletion or accuracy of any Content, including Your Content; the failure to store, transmit or receive transmission of Content; or the security, privacy, storage, or transmission of other communications originating with or involving use of the Services. Certain Services may enable you to specify the level at which such Services restrict access to Your Content. You are solely responsible for applying the appropriate level of access to Your Content. If you do not choose, the system may default to its most permissive setting. You agree that Company retains the right to create reasonable limits on Company’s use and storage of the Content, including Your Content, such as limits on file size, storage space, processing capacity, and similar limits described on the Website and as otherwise determined by Company in its sole discretion.” | Captured 2026-07-19Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ · Data retention ” | Captured 2026-06-08Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “ Please see the Data retention section below.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ Connecticut, Minnesota and Oregon residents can request a list of the specific “third parties” (as that term is defined under applicable law) to which we have disclosed personal information, and Delaware and Maryland residents can request a list of the categories of such “third parties.”” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ While we do not “sell” personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled “When we disclose the information we collect about you” above may be considered a “sale” subject to these opt-out rights. You can opt out of such disclosures by clicking the “Your Privacy Choices” link on our website footer, or designate an authorized agent to do so on your behalf.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ If Company becomes aware of any possible violations by you of the Agreement, Company reserves the right to investigate such violations. If, as a result of the investigation, Company believes that criminal activity has occurred, Company reserves the right to refer the matter to, and to cooperate with, any and all applicable legal authorities. Company is entitled, except to the extent prohibited by applicable law, to disclose any information or materials on or in the Services, including Your Content, in Company’s possession in connection with your use of the Services, to (i) comply with applicable laws, legal process or governmental request, (ii) enforce the Agreement, (iii) respond to any claims that Your Content violates the rights of third parties, (iv) respond to your requests for customer service, or (v) protect the rights, property or personal safety of Company, its Registered Users or the public, and all enforcement or other government officials, as Company in its sole discretion believes to be necessary or appropriate.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Affiliates. We may disclose information about you to our affiliates for the purposes identified in this Privacy Policy.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Service may contain links to websites, mobile applications, and other online services operated by unaffiliated parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any unaffiliated party. We do not control websites, mobile applications or online services operated by unaffiliated parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Business transferees. We may disclose information about you in the context of actual or prospective business transactions ( e.g., investments in Runway, financing of Runway, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to disclose certain information about you to prospective counterparties and their advisers. We may also disclose information about you to an acquirer, successor, or assignee of Runway as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which information about you is transferred to one or more unaffiliated parties as one of our business assets.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Payment processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, https://stripe.com/privacy .” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Vendors. Other parties like Amazon Web Services that provide, secure, promote, and improve our services.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ While we do not “sell” personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled “When we disclose the information we collect about you” above may be considered a “sale” subject to these opt-out rights. You can opt out of such disclosures by clicking the “Your Privacy Choices” link on our website footer, or designate an authorized agent to do so on your behalf. Note, if you use a cookie blocker such as Ghostery, it may block visibility of this tool or link, including in your web footer. If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference in accordance and to the extent required by applicable law.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Advertising and analytics partners. We may disclose information about you to our advertising and analytics partners to help us better understand your use of the Service, customize the Service, and provide you with advertising that we think will be of interest to you. Some analytics providers we partner with may provide specific opt-out mechanisms. For example, you may opt out of having Google Analytics use your information for analytics by installing the Google Analytics Opt-out Browser Add-on .” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ You may be able to access the Service through a social networking or other third-party account, such as Google. If you access the Service through a social networking account, you may allow us to have access to certain information in your social networking account profile. This may include your name, profile picture, gender, and email address. Third party sites have their own policies for handling your information. For a description of how these sites may use and disclose your information, including any information you make public, please consult those sites' privacy policies.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 17.1 Third Party Service Provider. The Company uses Stripe, Inc. and its affiliates as the third party service provider for payment services (e.g., card acceptance, merchant settlement, and related services) (a “ Third Party Service Provider ”). By buying or selling on any Services, you agree to be bound by Stripe’s Privacy Policy (currently accessible at https://stripe.com/us/privacy ) and its Terms of Service (currently accessible at https://stripe.com/us/terms ) and hereby consent and authorize the Company and Stripe to share any information and payment instructions you provide with one or more Third Party Service Provider(s) to the minimum extent required to complete your transactions.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Linked social media networking sites or other third-party platforms. If you choose to connect to the Service through a third-party platform like Google, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Data we collect from others. We may collect information about you or others through our affiliates or through non-affiliated parties. For example, we may offer features that help users invite their friends or contacts to use the Service, and we may collect contact details about these invitees so we can deliver their invitations. Please do not refer someone to us or share their contact details with us unless you have their permission to do so.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ 17.3 Non-Runway Services . The Services may allow you to connect or interact with services, applications, or tools provided by you or a third party, including via a model context protocol (MCP) server or other tool-calling interfaces (“ Non-Runway Services ”). Non-Runway Services are not part of the Services and are provided without warranties of any kind, including as to their security, availability, data, actions, suitability, or safety. By enabling a Non-Runway Service, you authorize Company to transfer data from your Account to the applicable provider. You represent and warrant that you have and will maintain at all times all rights, licenses, and permissions needed to provide data to Company through the Non-Runway Services. You are solely responsible for the Non-Runway Services you enable, any API keys or other credentials provided, and any data and actions originating from, and any purchases, commitments, and other downstream consequences arising from, Non-Runway Services. You may not use Non-Runway Services to circumvent rate limits, access or usage controls, authentication, or human confirmation requirements, or to bypass safety or security controls, override system instructions, violate applicable third party terms, or exfiltrate data through prompt injection or similar techniques. Company may throttle, suspend, or terminate Non-Runway Services access at its sole discretion.” | Captured 2026-07-19Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ California’s Shine the Light Law (CA Civil Code § 1798.83) allows residents with which a business has an established business relationship to request a list of the third parties to which the business has disclosed certain “personal information” (as specifically defined by the Shine the Light law) during the preceding year where the business knows or reasonably should know that the third parties used the personal information for the third parties’ own "direct marketing purposes,” defined by the Shine the Light law as the use of personal information to solicit or induce a purchase, rental, lease, or exchange of products, goods, property, or services directly to individuals by means of the mail, telephone, or electronic mail for their personal, family, or household purposes. However, the business is not required to provide this information where the business adopts and discloses, in its privacy policy, a policy of not disclosing “personal information” to third parties for their “direct marketing purposes” 1) unless the resident first affirmatively agrees or 2) if the resident has exercised an option that prevents that information from being disclosed. Runway maintains such a policy and thus is not required to provide this information. Runway does not engage in any disclosures in which it knows or reasonably should know that the third parties use the personal information for their own direct marketing purposes as defined by Shine the Light. ” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may disclose information about you to certain other parties, as described below, to provide, build, protect, improve, and promote our products and as required by law.” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Category of Personal and/or Sensitive Personal Information Categories of Other Parties to Whom We Disclose Purposes of Use Identifiers and other contact information (e.g. name, email address, or social network account and profile data)” | Captured 2026-06-08Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.” | Captured 2026-06-08Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ You may cancel or change your subscription by logging into your Account and going to the “Plans & Billing” page. If you cancel your subscription, you may use your subscription until the end of your then-current subscription term; your subscription will not be renewed after your then-current term expires. However, you will not be entitled to receive a prorated refund of any portion of the subscription fee paid for the then-current subscription period unless otherwise stated in these Terms of Use or required by applicable law. If you downgrade to a lower subscription tier, you will continue to have access to your then-current higher tier until the end of your then-current subscription term.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We reserve the right to issue refunds or credits at our sole discretion. If we issue a refund or credit, we are under no obligation to issue the same or similar refund in the future. If you request and obtain a refund, your subscription to the Services will be terminated as soon as the refund is initiated.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 8.5 Refunds. Except as stated in these Terms of Use or as required by applicable law, all fees for the Services are non-refundable, and if you cancel your subscription, you are not entitled to receive any refund or credits for the time remaining in your subscription period. In our discretion, we may provide a refund upon request. Visit our Help Center for instructions.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ We may change the subscription terms or subscription fees at any time on a going forward basis in our discretion. We may choose in our sole discretion to add, modify, or remove benefits and features from the Services. Your continued use of the Services after the changes become effective will constitute your acceptance of the changes. If you do not wish to continue subscribing with the new fees or features, you may cancel your subscription. If you accept the new subscription, its terms and conditions will apply for that renewal and all renewals going forward.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ If your organization would like to use, or has signed up for, Runway Enterprise Services, check out the Runway Enterprise Services Terms , which govern the use of Runway Enterprise Services. ” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ By subscribing, you authorize Company to charge your Payment Provider now, and again at the beginning of any subsequent subscription period. Upon renewal of your subscription, if Company does not receive payment from your Payment Provider, (a) you agree to pay all amounts due on your Account upon demand and/or (b) you agree that Company may either terminate or suspend your subscription and continue to attempt to charge your Payment Provider until payment is received (upon receipt of payment, your Account will be activated and for purposes of automatic renewal, your new subscription commitment period will begin as of the day payment was received). You authorize Company to receive updated information from your Payment Provider (e.g., new credit card number or updated expiration date).” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ From time to time, we may offer trial, discounted, or other promotional subscription fees. Such trial or promotional memberships are subject to the terms of this Section 8.4 except as otherwise stated in the promotional offer, including which users are eligible for the promotional memberships. Only one trial or promotional membership is available per user and may not be combined with any other promotion, except as otherwise stated in the promotional offer. If your subscription is ever cancelled or terminated for any reason, and you purchase an additional subscription, you may not be eligible to take advantage of another promotional rate offer. If your subscription includes a discount or promotional rate, you will be charged the promotional rate for the relevant number of subscription periods, and upon completion of the promotional period, your subscription will continue to automatically renew at the then-current subscription fee. To cancel and avoid being charged the full rate, you must notify us before the discount or promotional period ends. Please note that we do not provide price protection or refunds in the event of a price drop or promotional offering.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 8.4 Automatic Renewal. If you purchase a subscription to the Services, Company will automatically charge your payment method each renewal period for the then-current subscription fee until you cancel or when terminated in accordance with the Agreement. After your initial subscription period, and again after any subsequent subscription period, your subscription will automatically commence on the first day following the end of such period and continue for an additional equivalent period, at Company’s then-current price for such subscription. ” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ IF YOU SUBSCRIBE TO THE SERVICES FOR A TERM (THE “INITIAL TERM”), THEN THE TERMS WILL BE AUTOMATICALLY RENEWED FOR ADDITIONAL PERIODS OF THE SAME DURATION AS THE INITIAL TERM AT COMPANY’S THEN-CURRENT FEE FOR SUCH SERVICES UNLESS YOU ACT IN ACCORDANCE WITH SECTION 8.4 (AUTOMATIC RENEWAL) BELOW. ” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ If we are unable to refund money to your original payment method (e.g. if the refund authorization is declined), we reserve the right to refund via other means (such as check, gift card or digital credit) in our sole discretion. We may also advise you to contact your bank.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 8.3 Taxes. You are responsible for all applicable taxes. Company will charge tax when required.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 8.1 Payment. You agree to pay all fees or charges to your Account in accordance with the fees, charges and billing terms in effect at the time a fee or charge is due and payable. You must provide Company with a valid credit card (Visa, MasterCard, or any other issuer accepted by us) through a payment provider (“ Payment Provider ”), or purchase order information, as a condition to signing up for the Services. Your Payment Provider agreement governs your use of the designated credit card or other payment method, and you must refer to that agreement, not this Agreement, to determine your rights and liabilities. By providing Company with your credit card number or other payment method and associated payment information, you agree that Company is authorized to immediately invoice your Account for all fees and charges due and payable to Company hereunder and that no additional notice or consent is required. You agree to immediately notify Company of any change in your billing address or the credit card or other payment method used for payment hereunder. Company reserves the right at any time to change its prices and billing methods, either immediately upon posting on the Services or by email delivery to you.” | Captured 2026-07-19Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ 8.2 Service Subscription Fees. You will be responsible for payment of the applicable fee for any Services (each, a “ Service Subscription Fee ”) at the time you create your Account and select your annual package (each, a “ Service Commencement Date ”). No contract will exist between you and Company for the Services until Company accepts your order by a confirmatory email, SMS/MMS message, or other appropriate means of communication.” | Captured 2026-07-19Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.