Privacy Policy

1. Who we are

Rill is operated by RunaLabs LLC (“Rill”, “we”, “us”). This Privacy Policy explains how we handle personal information when you visit userill.dev or use our website, CLI, browser recording tools, and related services.

We are responsible for personal information used to operate accounts and our business. When you record or upload information on behalf of an organization, that organization determines the purposes of that content and is responsible for its own privacy notices and permissions. Contact us at hello@runalabs.dev about privacy or any data processing agreement your organization needs before using Rill.

2. Information we collect

• Account information. When you sign in through a third-party authentication provider, we receive account identifiers, your email address, and profile information such as your name. We store session information, preferences, and credentials used to authorize your agents.
• Recordings and diagnostics. Depending on the recording method and permissions you choose, content can include video, audio, screenshots, page URLs, console messages, errors, network request and response metadata, interaction timelines, comments, and recording titles. Network bodies may be captured when you explicitly enable that permission. Anything visible or audible in a recording can contain personal information.
• Usage and technical information. We process product events, device and browser details, IP addresses, identifiers, timestamps, errors, and operational logs to run and improve Rill.
• Billing information. Our payment processing provider handles payment details. We receive customer and subscription identifiers, payment status, and information needed to manage billing. Rill does not store full payment card numbers.
• Communications. We receive information you send in support requests, surveys, and feedback, including optional feedback submitted by an authorized agent.

3. How we use information

We use information to sign you in, authorize agents, capture and process recordings, host and share evidence, handle payments, deliver service emails, answer support requests, troubleshoot failures, prevent abuse, and meet legal obligations. We also use product analytics, feedback, and campaign measurement to improve Rill and understand how people find it.

Where a legal basis is required, we rely on performing our agreement with you, legal obligations, legitimate interests such as security and service improvement, or consent where required. Agreeing to our Terms does not replace any separate consent required for optional tracking or marketing.

4. Recording and sharing choices

You decide what to record and which agents to authorize. Diagnostic redaction attempts to remove credentials, cookies, URL query values, and other sensitive values. It is best-effort: it does not mask the video and cannot guarantee that all sensitive information is removed. Review recordings and diagnostics before sharing, and avoid capturing secrets or information you do not have permission to process.

Anyone with an active share link can access the recording and its shared diagnostics. Recipients may forward the link or retain copies. Putting a link in a private repository or message does not restrict the Rill link to that audience. You can revoke or expire links and delete recordings; these controls cannot remove copies already retained by recipients.

5. Cookies, analytics, and advertising

We use cookies and browser storage for sign-in, security, remembering your last sign-in provider, and preferences. Our analytics vendors help us measure product usage and diagnose errors. Product usage analytics are enabled by default and can be disabled in Settings.

On selected public pages, our analytics vendors may record anonymous website interactions to help us understand usability. This is separate from recordings you create with Rill. Public-page replay is restricted to signed-out visits, masks inputs, and excludes the authenticated workspace, recording and share pages, network bodies, and console logs.

We use advertising measurement services where enabled to associate ad visits with events such as sign-up or subscription. This can involve cookies, advertising click identifiers, device or connection information, and conversion events shared with advertising vendors.

Our public replay and advertising integrations respect Global Privacy Control and capture opt-outs. Disabling product usage analytics in Settings also stops advertising measurement in that browser. You can additionally manage cookies and storage in your browser; blocking essential cookies may prevent sign-in. Advertising measurement can qualify as “sharing” under some privacy laws. We do not sell your recordings to advertisers.

6. Who receives information

We share information with vendors and service providers that help us operate Rill and our business. These include providers of hosting and cloud infrastructure, storage, video processing and delivery, authentication, payment processing, email communications, analytics and public website replay, and advertising measurement. These providers process information needed to perform their services. Their own privacy notices also apply when you interact directly with their services.

We may disclose information to comply with lawful requests, protect people and the Service, investigate abuse, or establish or defend legal claims. Information may also be transferred as part of a merger, acquisition, or sale of the business, subject to applicable privacy requirements. Your chosen recipients and connected tools receive the content you share or authorize them to access.

7. Retention, deletion, and security

We keep account information and content while needed to provide the Service, subject to your deletion requests and applicable legal requirements. Deleting a recording disables access and queues removal of its hosted video and diagnostics. Provider cleanup may take time and retry after failures; deletion is not instantaneous across every system. Limited records may remain for billing, security, fraud prevention, legal obligations, or resolving disputes.

To request account deletion or ask about retention of specific information, contact hello@runalabs.dev. Revoking a share link only removes access through that link; it does not delete the recording from your account.

We use access controls and other safeguards designed to protect information. No storage or transmission method is completely secure. Our providers may process information in countries other than yours. Where required, international transfers must use an applicable legal mechanism, such as appropriate contractual safeguards.

8. Your rights and choices

Depending on where you live and the applicable law, you may have rights to access, correct, delete, restrict, or obtain a portable copy of your personal information; object to processing; withdraw consent; or opt out of certain advertising uses. To make a request, email hello@runalabs.dev with the subject “Privacy request”. We may need to verify your identity. We will respond within the period required by applicable law.

If your information appears in a recording made by someone else, contact the person or organization responsible for that recording, or contact us for help identifying the appropriate route. You may also contact your local privacy regulator. If we decline a request, you may ask us to review that decision, including exercising any appeal rights available under applicable law.

9. Children and policy changes

Rill is intended for people aged 16 or older and is not directed to children under 16. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We may update this policy as Rill changes. We will update the date on this page and provide additional notice where required. Questions about this policy can be sent to hello@runalabs.dev.