Privacy Policy

1. What We Collect

When you create a Runup account, we collect the following information:

• Account information: Your name and email address, provided through Google sign-in.
• Aircraft data: Aircraft details, logbook scans, maintenance records, and other documents you upload to the Service.
• Billing information: If you subscribe to a paid plan, payment details are collected and processed by Lemon Squeezy, our third-party payment processor. We do not store your credit card number or payment credentials on our servers.
• Usage data: Basic information about how you use the Service, such as pages uploaded and features accessed. We use Vercel Analytics and Speed Insights for aggregate, privacy-friendly performance monitoring. These tools do not use cookies or collect personally identifiable information.

2. How We Use Your Data

Your data is used exclusively to provide and improve the Runup service:

• Managing your aircraft maintenance records, logbooks, and compliance tracking.
• Processing logbook scans through our OCR and AI extraction pipeline to digitize maintenance entries.
• Processing subscription payments and managing your billing account.
• Communicating with you about your account, billing, and service updates.

We do not sell, share, or distribute your personal information to third parties for marketing purposes.

3. AI Processing

When you upload logbook scans, your images are processed through third-party AI and OCR services to extract text and structured data. These services process your scans solely to return results to Runup. We do not permit these providers to use your data for training their models or for any purpose beyond fulfilling our processing requests.

The AI services we use for processing include Google Cloud Vision, Microsoft Azure Document Intelligence, Google Gemini, Anthropic Claude, and OpenAI. Your scan images and extracted text are transmitted to these services over encrypted connections.

4. Payment Processing

Subscription payments are handled by Lemon Squeezy, which acts as our Merchant of Record. Lemon Squeezy collects and processes your payment information in accordance with their own privacy policy. We receive only the information necessary to manage your subscription: subscription status, plan type, billing cycle dates, and customer portal access. We never receive or store your full credit card number.

5. Data Storage and Security

Your data is stored securely using Supabase, hosted on AWS infrastructure. Uploaded logbook scans and documents are stored in encrypted cloud storage. All connections to Runup use HTTPS encryption. Database access is restricted through row-level security policies, ensuring users can only access their own data.

6. Third-Party Services

We use the following third-party services to operate Runup:

• Supabase (authentication, database, file storage)
• Google Cloud (sign-in, OCR processing, AI extraction)
• Microsoft Azure (OCR processing)
• Anthropic (AI verification of extracted data)
• OpenAI (fallback AI extraction)
• Lemon Squeezy (payment processing and subscription management)
• Vercel (application hosting, privacy-friendly analytics and performance monitoring)

These services process data only as needed to provide their respective functions. We do not share your data with any parties beyond those listed here.

7. Cookies and Tracking

Runup uses only essential cookies required for authentication and session management. We do not use tracking cookies or advertising pixels. We do not track you across other websites. Vercel Analytics and Speed Insights collect aggregate performance data without using cookies or identifying individual users.

8. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• With the third-party services listed above, solely to operate the Service.
• When you explicitly choose to share records through a Sales Portal or mechanic access link. You control what is shared and can revoke access at any time.
• If required by law, court order, or government request.

9. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible under free tier limits. If you request account deletion, we will delete your personal data and uploaded content within 30 days, except where retention is required by law.

10. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Export your data at any time through the Service.

To exercise any of these rights, contact us at support@runuppro.com.

11. Children's Privacy

Runup is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice within the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

Questions about this policy? Contact us at support@runuppro.com.