1. Introduction

Rune ("we", "us", "our") is operated by Loman Group LLC. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services at tryrune.ai.

2. Information we collect

Account information: When you create an account, we collect your name, email address, and password. If you sign in via Google OAuth, we receive your name and email from Google.

Workspace data: Data you and your AI agents create within Rune workspaces (tables, fields, records) is stored in isolated databases associated with your organization.

Usage data: We collect standard server logs including IP addresses, browser type, and pages visited to operate and improve the service.

Waitlist information: If you join our waitlist, we collect your email address and optionally your name.

3. How we use your information

To provide, maintain, and improve the Rune service
To authenticate your identity and manage your account
To communicate with you about the service, including waitlist notifications
To detect and prevent fraud, abuse, or security incidents

4. Data storage and security

Your workspace data is stored in isolated databases. Each workspace has its own database that is not shared with other organizations. We use encryption in transit (TLS) and regularly back up all data.

Access to your data via the MCP protocol requires OAuth authentication with workspace-level scopes. You control which agents and users have access.

5. Third-party services

We use the following third-party services:

Cloudflare: DNS, CDN, and DDoS protection
Google OAuth: Optional sign-in provider (only if you choose to sign in with Google)

We do not sell your personal information to third parties.

6. Data retention

We retain your account and workspace data for as long as your account is active. If you delete a workspace, we retain the data for 30 days before permanent deletion, allowing you to restore it if needed. You can request deletion of your account and all associated data at any time by contacting us.

7. Your rights

You have the right to access, correct, or delete your personal information. You can export your data or request account deletion by contacting us at the address below.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

9. Contact

If you have questions about this Privacy Policy, contact us at [email protected].