Privacy policy

1. Who we are

RunwiseOS ("we", "us", "our") is operated by RunwiseOS Ltd, a company registered in Scotland (Company No. SC895421), registered office [REGISTERED ADDRESS]. We are the data controller for personal data collected through our website (runwiseos.com) and our application. For questions about this policy, emailprivacy@runwiseos.com.

2. Personal data we collect

We collect and process the following categories of personal data:

• Account data — name, email address, phone number, company name, job title and password (stored as a salted hash).
• Billing data — billing address, VAT number and payment references. Card details are processed directly by Stripe (see section 6); we do not store full card numbers.
• Usage data — pages visited, features used, IP address, device and browser type, and diagnostic logs to keep the service reliable.
• Communications — messages you send us and support conversations.

3. Data processed on behalf of subscribers

When you use the RunwiseOS application, you (the subscriber) upload information about your own customers, jobs, quotes, invoices, photos and site documents ("Customer Data"). For that Customer Data, you are the data controller and RunwiseOS Ltd is a data processor acting on your instructions. We process it only to provide the service, in accordance with our Terms of Service and any data processing terms agreed with you.

4. Why we use your data (lawful bases)

• Contract — to provide the service, take payment and provide support.
• Legitimate interests — to keep the service secure, prevent fraud, improve features and communicate about product updates.
• Legal obligation — to comply with UK tax, accounting and other laws.
• Consent — for optional marketing emails and non-essential cookies. You can withdraw consent at any time.

5. Cookies

We use strictly-necessary cookies to keep you signed in and to remember your preferences. With your consent we may use analytics cookies to understand how the site is used. You can manage cookie preferences in your browser and via the cookie banner where shown.

6. Sub-processors and third parties

We share personal data only with vendors that help us deliver the service, under written data-processing terms. Current sub-processors include:

• Stripe Payments Europe, Ltd. — payment processing.
• Supabase — application hosting, database and file storage.
• Resend — transactional email.

A current list is available on request. Where any sub-processor is located outside the UK, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep it

We keep account and Customer Data for as long as your subscription is active. When your subscription ends, we retain the data for [REVIEW — e.g. 30 days] to allow reactivation and export, then delete or anonymise it, except where we must keep records for legal reasons (for example, tax records for six years).

8. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data (subject to legal retention).
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent for anything you consented to.

To exercise any right, emailprivacy@runwiseos.com. If you're not happy with our response you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted on a need-to-know basis. We take daily backups and test our restore process.

10. Changes to this policy

We may update this policy from time to time. Material changes will be flagged in-app or by email. The date at the top of this page shows when it was last updated.