Image / Video / Audio Generation · runwayml.comRunway
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Service improvement, research, and analytics. We and our analytics partners may use information about you to analyze your usage of the Service, improve the Service, conduct research, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as…”
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
The retention carve-outs for 'legal compliance' and 'securing the Service' are broadly worded and could justify retaining significant amounts of personal data even after a deletion request. No specific retention schedules are disclosed.
The retention standard of 'as long as necessary' plus 'legitimate business purposes' is vague and open-ended. The specific three-year outer limit for biometric data is notable—while it sets a cap, three years post-last-interaction is a substantial retention period for sensitive biometric identifiers.
Unilateral modification with constructive acceptance via continued use is a standard but user-adverse clause. It means data handling practices can change materially without explicit user consent, which may be problematic under GDPR (which requires fresh consent for material changes affecting lawful basis) and similar regimes.
How to read this page: Overall risk rates what Runway's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 176 verified, verbatim-cited findings below — read the citations.
Based on 214 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Privacy PolicyVerified - read in full - 127 citationsstaticLast captured 2026-08-07
- Terms of ServiceVerified - read in full - 0 citationsstaticLast captured 2026-08-28
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment establishes the right to be free from discrimination for exercising privacy rights, creating a non-retaliation protection for users who exercise their data subject rights.
" Right to be free from discrimination for exercising your rights;"
Confirms Runway's obligation under the CCPA to provide categorized disclosures of personal information collected and disclosed for business or commercial purposes, and the categories of third parties receiving such information, directing the reader to a chart for details.
" Throughout this Privacy Policy, we discuss in detail the specific pieces of personal information and sensitive personal information we collect, the sources of that information, and how we disclose it. Under the California Consumer Privacy ..."
This segment establishes legitimate interests as a legal basis for processing personal data under GDPR, permitting Runway to use, share, or disclose personal data for specified business purposes including customer service, security, fraud prevention, and business improvement, subject to the balancing test.
" Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affec..."
Carves out from the Privacy Policy's scope the processing of personal data performed by Runway on behalf of business Customers, clarifying that such processing is governed by separate agreements and directing affected individuals to contact the Customer, thereby limiting Runway's direct obligations to end users in that context.
" Runway provides a set of tools and services for creating, editing, and generating content. In certain cases, we process information about you on behalf of our business customers or their affiliates (“Customers”). Our processing of this inf..."
Defines 'professional information' as a category of personal data subject to collection and processing, scoping the types of data covered by associated data-use permissions.
" Professional information (such as professional titles of business contacts)"
Permits the company and analytics partners to use personal data for analytics, research, service improvement, new product development, and creation of aggregated/de-identified data from personal data, which encompasses potential model training and product development activities.
" Service improvement, research, and analytics. We and our analytics partners may use information about you to analyze your usage of the Service, improve the Service, conduct research, improve the rest of our business, help us understand use..."
This segment grants California and Oregon residents the right to request detailed information about categories of personal information collected, disclosed, sold, or shared, sources, purposes, and categories of third-party recipients, incorporating state-specific disclosure rights.
" California and Oregon residents can also request information about the categories of personal information we collect, disclose, or sell or share about you. California residents can request the categories of sources of such information; the..."
Under GDPR, reliance on 'legitimate interests' as a legal basis permits significant data processing without user consent. The enumerated interests ('analyzing and improving our business') are broad and could encompass a wide range of uses.
"Runway is considered the “data controller” of the “personal data” (as defined under the General Data Protection Regulation) we handle under this Privacy Policy. In other words, Runway is responsible for deciding how to collect, use, and dis..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"Targeted advertising. We and our ad partners may use information about you to deliver more relevant content to you on our Service and across the Internet."
Cross-internet targeting involves sharing identifiers with ad networks. Under CCPA/CPRA this likely constitutes 'sharing' personal information and requires an opt-out right. Users may not be aware their platform usage drives off-platform ads.
AI-generated interpretation, not legal advice.
" Runway provides a set of tools and services for creating, editing, and generating content. In certain cases, we process information about you on behalf of our business customers or their affiliates (“Customers”). Our processing of this information is at the direction of Customers and subject to our agreements with them. This Privacy Policy does not apply to such processing. If you have a question about how this information is processed, contact the Customer."
Carves out from the Privacy Policy's scope the processing of personal data performed by Runway on behalf of business Customers, clarifying that such processing is governed by separate agreements and directing affected individuals to contact the Customer, thereby limiting Runway's direct obligations to end users in that context.
AI-generated interpretation, not legal advice.
"Runway is considered the “data controller” of the “personal data” (as defined under the General Data Protection Regulation) we handle under this Privacy Policy. In other words, Runway is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the European Economic Area and the United Kingdom require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows: Contractual Commitments: We may use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to comply with our agreements with you, and to honor our commitments in any contracts that we have with you. With Your Consent: Where required by law, and in some other cases, we use, share, or disclose personal data on the basis of your consent. Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, analyzing and improving our business, providing security for the Service and other products and services we may offer, preventing fraud, and managing legal issues. Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations"
Under GDPR, reliance on 'legitimate interests' as a legal basis permits significant data processing without user consent. The enumerated interests ('analyzing and improving our business') are broad and could encompass a wide range of uses.
AI-generated interpretation, not legal advice.
"While we do not “sell” personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled “When we disclose the information we collect about you” above may be considered a “sale” subject to these opt-out rights."
Despite denying traditional 'sale,' Runway concedes the disclosure to advertising and analytics partners may qualify as a CCPA 'sale,' which involves transferring personal information to third parties for valuable consideration.
AI-generated interpretation, not legal advice.
"We collect the categories of personal information identified above from the following sources: (1) directly from you; (2) through your use of the Service; and (3) other parties such as unaffiliated parties."
Data collection from unaffiliated third parties expands the information profile Runway maintains on users beyond what users knowingly provide.
AI-generated interpretation, not legal advice.
"We may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent identification of any particular user or device. We may use or disclose this aggregated or de-identified information in our discretion."
Unrestricted discretion to use and disclose aggregated/de-identified data means user data derivatives may be monetized or shared freely. The adequacy of de-identification is not specified, creating re-identification risk.
AI-generated interpretation, not legal advice.
"We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business."
Unilateral modification with constructive acceptance via continued use is a standard but user-adverse clause. It means data handling practices can change materially without explicit user consent, which may be problematic under GDPR (which requires fresh consent for material changes affecting lawful basis) and similar regimes.
AI-generated interpretation, not legal advice.
"Please note that certain information may be exempt from such requests under applicable law. For example, we may retain certain information for legal compliance and to secure the Service. We may need certain information to provide the Service to you; if you ask us to delete it, you may no longer be able to use the Service."
The retention carve-outs for 'legal compliance' and 'securing the Service' are broadly worded and could justify retaining significant amounts of personal data even after a deletion request. No specific retention schedules are disclosed.
AI-generated interpretation, not legal advice.
"We will retain your information for only as long as necessary to provide the Service and for the other legitimate business purposes set out in this Policy such as safety, security, compliance, and dispute resolution. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, applicable legal requirements, and our legitimate interests. For example, we will retain face scans and voiceprints for no longer than the earlier of the date the initial purpose for collecting the data is satisfied or within three years of your last interaction with us."
The retention standard of 'as long as necessary' plus 'legitimate business purposes' is vague and open-ended. The specific three-year outer limit for biometric data is notable—while it sets a cap, three years post-last-interaction is a substantial retention period for sensitive biometric identifiers.
AI-generated interpretation, not legal advice.
"Vendors. Other parties like Amazon Web Services that provide, secure, promote, and improve our services."
The use of 'like Amazon Web Services' implies this is illustrative, not exhaustive. Users have no clear visibility into the full list of subprocessors receiving their data.
AI-generated interpretation, not legal advice.
"Advertising and analytics partners. We may disclose information about you to our advertising and analytics partners to help us better understand your use of the Service, customize the Service, and provide you with advertising that we think will be of interest to you. Some analytics providers we partner with may provide specific opt-out mechanisms. For example, you may opt out of having Google Analytics use your information for analytics by installing the Google Analytics Opt-out Browser Add-on ."
Sharing data with advertising partners for targeted advertising may constitute a 'sale' or 'sharing' under CCPA/CPRA and similar state privacy laws. The opt-out is user-initiated, not a default restriction.
AI-generated interpretation, not legal advice.
"Affiliates. We may disclose information about you to our affiliates for the purposes identified in this Privacy Policy."
Affiliate sharing clauses are common but create risk when affiliates are undefined and their own data practices are not detailed. The broad 'purposes identified in this Privacy Policy' scope is wide.
AI-generated interpretation, not legal advice.
"We may collect information about you or others through our affiliates or through non-affiliated parties."
Collection from non-affiliated third parties means Runway may combine data users did not directly submit. This expands data scope and reduces user control over their information profile.
AI-generated interpretation, not legal advice.
"Inferences drawn from non-sensitive information we collect Vendors Affiliates Entities for legal and safety purposes As consistent with your consent Provide the Service Communicate with you Analyze and improve the Service Marketing Legal and safety Business transfers As authorized by you"
The platform derives and discloses inferred profiles from user data, which is a form of behavioral profiling with potential marketing and discrimination risks.
AI-generated interpretation, not legal advice.
" While we do not “sell” personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled “When we disclose the information we collect about you” above may be considered a “sale” subject to these opt-out rights. You can opt out of such disclosures by clicking the “Your Privacy Choices” link on our website footer, or designate an authorized agent to do so on your behalf."
Discloses that disclosure of personal information to third-party advertising and analytics partners may constitute a CCPA 'sale,' and provides the mechanism by which users can opt out of such disclosures, creating an obligation to honor opt-out requests.
AI-generated interpretation, not legal advice.
"However, Runway provides California residents the ability to exercise rights under the California Consumer Privacy Act (“CCPA”) to opt out of “sales” and “sharing” of their personal information for cross-context behavioral advertising. Such opt out would apply to disclosures covered by Shine the Light if applicable. Please visit the Your Privacy Choices link in the website footer or app settings to exercise those CCPA rights."
Provides California residents with the mechanism to exercise CCPA opt-out rights covering Shine the Light disclosures, establishing the procedure for opting out of cross-context behavioral advertising sales and sharing.
AI-generated interpretation, not legal advice.
" Web beacons , also known as pixel tags or clear GIFs, which may be used to determine that a webpage or email was accessed or opened, or that certain content was viewed or clicked."
Defines web beacons/pixel tags/clear GIFs as tracking technologies used to determine webpage or email access, content viewing, and clicking behavior, establishing the scope of data collection methods covered by the policy.
AI-generated interpretation, not legal advice.
" We may combine information that we collect from you through the Service with information that we obtain from others and information derived from other products or services we provide."
Grants the company permission to combine data collected directly from users with data obtained from third parties and data derived from other products or services, broadening the scope of permissible data processing.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Runway's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
27 verified clausesClauses in Runway's policies that work in your favour — commitments the platform made to you.
- Subprocessors & data sharingsale/sharing of personal data
“California’s Shine the Light Law (CA Civil Code § 1798.83) allows residents with which a business has an established business relationship to request a list of the third parties to which the business has disclosed certain “personal information” (as specificall…”
Continues the definition of Shine the Light law terms, including 'direct marketing purposes,' establishing the statutory scope of third-party disclosure obligations.
📍 Privacy Policy › “Shine the Light”Jump to exact text → - Privacy & data use
“You can exercise the above rights by submitting a request via email to privacy@runwayml.com. To protect your privacy and security, we take reasonable steps to verify your identity and requests before granting such requests. If we are unable to verify your iden…”
This segment establishes the procedure for exercising privacy rights including identity verification requirements, the use of authorized agents by California residents, and the submission mechanism via email, defining th…
- Terms changes: no advance notice promised
📍 Privacy Policy › “Right to data portability; and”Jump to exact text → - Privacy & data use
“You also have the right to not be discriminated against (as provided for in California law) for exercising certain of your rights referenced herein. Certain information may be exempt from such requests under applicable law. In addition, we need certain types o…”
Qualifies CCPA rights by noting that certain information may be exempt from requests, that exercising deletion rights may impair service access, and cross-references the procedure for exercising rights, limiting the scop…
📍 Privacy Policy › “Your CCPA rights”Jump to exact text → - Privacy & data usechildren's data
“The Service is not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected pe…”
Establishes the obligation to delete personal information collected from children without required parental consent upon discovery, creating a compliance-triggered deletion requirement.
📍 Privacy Policy › “Children”Jump to exact text → - Privacy & data usesale/sharing of personal data
“Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for collecting, “sharing” or “selling” your personal information as those terms are d…”
Specifies the right of California residents to receive disclosure of categories of personal information collected, sources, purposes, third-party recipients, and categories of data sold or shared, as required by CCPA.
📍 Privacy Policy › “Your CCPA rights”Jump to exact text → - Privacy & data use
“With your consent. In some cases, we may specifically ask for your consent to collect, use or disclose information about you, such as when required by law. You may withdraw your consent at any time by contacting us at the address given at the end of this Priva…”
Establishes users' right to withdraw consent to data collection, use, or disclosure at any time, and imposes a procedure for doing so via contact address or email unsubscribe, creating a legally significant opt-out right…
📍 Privacy Policy › “How we use information about you”Jump to exact text →
+ 21 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
0 verified clausesWhat Runway requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Runway's published policies yet.
What the policies actually cover
8 topics- Product telemetry & usage tracking18 clauses
- Advertising & tracking2 protective22 clauses
- Sale or sharing of personal data4 protective13 clauses
- Children's data2 protective2 clauses
- Government & law-enforcement disclosure4 clauses
- Terms can change at any time1 clause
- Deletion rights & post-termination survival2 protective4 clauses
- Breach-notification promises1 clause
62 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Data retention” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Right to data portability; and” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We will retain your information for only as long as necessary to provide the Service and for the other legitimate business purposes set out in this Policy such as safety, security, compliance, and dispute resolution. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We will retain your information for only as long as necessary to provide the Service and for the other legitimate business purposes set out in this Policy such as safety, security, compliance, and dispute resolution. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We will retain your information for only as long as necessary to provide the Service and for the other legitimate business purposes set out in this Policy such as safety, security, compliance, and dispute resolution. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the...”Open source citation
The clause allows indefinite, perpetual, or necessity-based retention.
“We will retain your information for only as long as necessary to provide the Service and for the other legitimate business purposes set out in this Policy such as safety, security, compliance, and dispute resolution. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“This Batch Arbitration provision shall in no way be interpreted as authorizing a class, collective and/or mass arbitration or action of any kind, or arbitration involving joint or consolidated claims under any circumstances, except as expressly set forth in this provision.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | governing law disputes | conditional | MEDIUM | 24 |
| Free | output ownership | conditional | MEDIUM | 2 |
| Free | training use | worsens | HIGH | 3 |
| Pro / Paid | commercial use | worsens | HIGH | 3 |
| Pro / Paid | governing law disputes | conditional | MEDIUM | 4 |
| Pro / Paid | privacy data use | worsens | HIGH | 4 |
| Team / Business | data retention | conditional | MEDIUM | 4 |
| Team / Business | governing law disputes | conditional | MEDIUM | 2 |
| Team / Business | output ownership | worsens | HIGH | 4 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“While we do not “sell” personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled “When we disclose the information we collect about you” above may be considered a “sale” subject to these opt-out rights.”Before citation
“Affiliates. We may disclose information about you to our affiliates for the purposes identified in this Privacy Policy.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Marketing and Advertising. We (directly or through our vendors or service providers) may collect and use information about you for marketing and advertising purposes:”Before citation
“Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for collecting, “sharing” or “selling” your personal information as those terms are defined by the CCPA; the categories of third parties to whom we disclose or “sell” or with whom we “share” personal information; and the categories of personal information we “sell” or “share.””After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“13. MONITORING AND ENFORCEMENT. Company reserves the right to: (a) remove or refuse to post any of your Content in our sole discretion; (b) take any action with respect to any of your Content that we deem necessary or appropriate in our sole discretion, including if we believe that such Content violates this Agreement, infringes any intellectual property right or other right of any person or entity, threatens the personal safety of users of the Services or the public, or could create liability for the Company; (c) disclose your identity or other information about you to any third party who claims that material posted by you violates their rights, including their intellectual property rights or their right to privacy; (d) take appropriate legal action, including without limitation, referral to law enforcement, for any illegal or unauthorized use of the Services; and/or (e) terminate or suspend your access to all or part of the Services for any or no reason, including without limitation, any violation of this Agreement.”Before citation
“While we do not “sell” personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled “When we disclose the information we collect about you” above may be considered a “sale” subject to these opt-out rights.”After citation
Latest stance: arbitration or waiver on governing law disputes
“You and Company agree that all materials and documents exchanged during the arbitration proceedings shall be kept confidential and shall not be shared with anyone except the parties’ attorneys, accountants, or business advisors, and then subject to the condition that they agree to keep all materials and documents exchanged during the arbitration proceedings confidential.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“18.6 Governing Law. THE TERMS AND ANY ACTION RELATED THERETO WILL BE GOVERNED AND INTERPRETED BY AND UNDER THE LAWS OF THE STATE OF NEW YORK, CONSISTENT WITH THE FEDERAL ARBITRATION ACT, WITHOUT GIVING EFFECT TO ANY PRINCIPLES THAT PROVIDE FOR THE APPLICATION OF THE LAW OF ANOTHER JURISDICTION. THE UNITED NATIONS CONVENTION ON CONTRACTS FOR THE INTERNATIONAL SALE OF GOODS DOES NOT APPLY TO THE AGREEMENT.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“16.1 Applicability of Arbitration Agreement. You agree that any dispute between you and any of the Company Parties relating in any way to the Services or this Agreement, will be resolved by binding arbitration, rather than in court, except that (1) you and the Company Parties may assert individualized claims in small claims court if the claims qualify, remain in such court and advance solely on an individual, non-class basis; and (2) you or the Company Parties may seek equitable relief in court for infringement or other misuse of intellectual property rights (such as trademarks, trade dress, domain names, trade secrets, copyrights, and patents). This Arbitration Agreement shall survive the expiration or termination of this Agreement and shall apply, without limitation, to all claims that arose or were asserted before the Term start date or any prior version of this Agreement. This Arbitration Agreement does not preclude you from bringing issues to the attention of federal, state or local agencies. Such agencies can, if the law allows, seek relief against the Company Parties on your behalf. For purposes of this Arbitration Agreement, “ Dispute ” will also include disputes that arose or involve facts occurring before the existence of this or any prior versions of the Agreement as well as claims that may arise after the termination of this Agreement.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“If the party requesting arbitration is represented by counsel, the Request shall also include counsel’s name, telephone number, mailing address, and email address. Such counsel must also sign the Request. By signing the Request, counsel certifies to the best of counsel’s knowledge, information, and belief, formed after an inquiry reasonable under the circumstances, that: (1) the Request is not being presented for any improper purpose, such as to harass, cause unnecessary delay, or needlessly increase the cost of dispute resolution; (2) the claims, defenses and other legal contentions are warranted by existing law or by a nonfrivolous argument for extending, modifying, or reversing existing law or for establishing new law; and (3) the factual and damages contentions have evidentiary support or, if specifically so identified, will likely have evidentiary support after a reasonable opportunity for further investigation or discovery.”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-07· verified 2026-08-07
- Terms of Service:Last captured 2026-08-28· verified 2026-08-28
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 403 more findings this quarter vs last (567 vs 164). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Runway's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Runway's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.