Privacy Policy
Last updated: March 2026
Runway is a financial intelligence platform for early-stage founders, built and operated by lvl1 Accelerator. We are committed to protecting your privacy and being transparent about how we handle your financial data. This policy explains what we collect, how we use it, and the choices you have.
1. Information We Collect
Account Information
When you sign up, we collect your email address and the role you select (founder or investor).
Company & Financial Data
If you are a founder, you may connect payment processors (Razorpay, Stripe, Cashfree), accounting software (Zoho Books), or upload bank statements. We store the aggregated financial metrics derived from these sources — including MRR, burn rate, runway, and similar KPIs — in our database.
Integration Credentials
API keys and OAuth tokens for third-party integrations are stored encrypted at rest. They are used solely to sync data into your dashboard and are never shared with any third party.
Usage Data
We collect standard web logs (IP address, browser type, pages visited) for security and performance monitoring.
2. How We Use Your Data
To Power Your Dashboard
Your financial metrics are used exclusively to populate your Runway dashboard, generate forecasts, and provide AI-powered analysis.
AI Features — Data Minimisation
When you use the AI Chat or Investor Update Generator, we send only the minimum aggregated metrics required to answer your question. We never send raw transaction records, bank credentials, company identity, or personal details to any AI provider. For chat, we limit context to the last 6 months of aggregated monthly metrics.
Partner Matching (with consent)
If you opt in to data sharing in Settings → Privacy, we may share anonymised and aggregated metrics (industry, stage, MRR band, runway range — never your company name or identity) with our partner ecosystem of investors, lenders, and grant providers to help you find funding opportunities.
Platform Improvement
Anonymised, aggregated usage patterns help us improve the product. We do not use your individual financial data to train AI models.
3. Payment Data
What we collect
If you subscribe to a paid plan, we collect your subscription status, billing cycle, and payment history (amounts, dates, Razorpay payment IDs). We do not store card numbers, CVVs, UPI IDs, bank account details, or any other sensitive payment credentials.
How payments are processed
All payment processing is handled exclusively by Razorpay Software Private Limited, a PCI-DSS Level 1 certified payment gateway. When you make a payment, your payment details are entered directly into Razorpay's secure checkout and never pass through or are stored on our servers.
Razorpay's privacy practices
Razorpay's collection and use of your payment information is governed by Razorpay's own Privacy Policy (razorpay.com/privacy). By making a payment on Runway, you consent to Razorpay's processing of your payment data.
Billing records
We retain payment history (subscription plan, amount, date, status) for accounting and legal compliance purposes for a minimum of 7 years, even after account deletion, as required under Indian tax law.
4. Data Sharing — Third Parties
Investors & Partners
You control exactly what financial data investors can see through the Data Room. You set the access level (Teaser, Summary, Full, or Deep Audit) and the expiry date. You can revoke access at any time.
Service Providers
We use Supabase (database hosting), Vercel (hosting), Anthropic and Google (AI inference), and Resend (transactional email). Each provider processes data only as necessary to deliver the service and under appropriate data processing agreements.
No Sale of Personal Data
We do not sell your personal data or identifiable financial information to any third party, ever.
Legal Requirements
We may disclose data if required by law or to protect the rights, property, or safety of Runway, our users, or the public.
5. Data Security
Encryption
All data is encrypted in transit (TLS 1.2+) and at rest. Integration credentials are stored using strong encryption with keys managed separately from data.
Access Controls
Database access is restricted to authenticated users. Row-level security ensures each founder can only access their own company's data.
Incident Response
In the event of a data breach affecting your information, we will notify you within 72 hours of discovery.
6. Your Rights
Access & Portability
You may request a copy of all data we hold about you and your company at any time by emailing support@lvl1accelerator.com.
Correction
You can update your company profile and financial data directly within the dashboard.
Deletion
You can delete your account and all associated data directly from Settings → Profile → Delete My Account. Deletion is immediate and permanent — your company data, financial metrics, integrations, and investor access records are removed instantly. Anonymised, aggregated data that has already been included in benchmarking reports cannot be retroactively removed.
Opt-out of Data Sharing
You can toggle anonymised data sharing on or off at any time from Settings → Privacy.
7. Data Retention
We retain your account and financial data for as long as your account is active. If you delete your account, we delete your data within 30 days. Anonymised, aggregated data may be retained for product analytics.
8. Cookies
We use a single session cookie to keep you logged in. We do not use advertising or third-party tracking cookies. Analytics (if any) use privacy-preserving, cookieless methods.
9. Changes to This Policy
If we make material changes to this policy, we will notify you by email and update the "Last updated" date above. Your continued use of Runway after changes take effect constitutes acceptance.
10. Contact Us
Questions, concerns, or requests? Email us at support@lvl1accelerator.com or write to: lvl1 Accelerator, Chennai, India.