Privacy Policy
Last updated: 20 April 2026
This Privacy Policy explains how RunwayReady AI, S.L. (“RunwayReady”, “we”, “us”) processes the personal data you provide through this website (the “Site”), in accordance with Regulation (EU) 2016/679 (“GDPR”) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”).
1. Data controller
- RunwayReady AI, S.L.
- NIF: B-XXXXXXXX (registration in progress)
- Parque Científico de Madrid
- C/ Faraday 7, Campus de Cantoblanco
- 28049 Madrid, Spain
- Email: privacy@runwayready.ai
You may contact our Data Protection Officer at dpo@runwayready.ai.
2. What data we collect
We only collect the strict minimum required to operate the Site:
- Waitlist & newsletter forms. Email address and, optionally, your first name. We tag the submission with the form source (e.g. “hero”, “footer”) for our internal analytics only.
- Contact / partner form. Name, email, optional phone number and message body.
- Geolocation (country only). When the Site loads we send a single, anonymous request to a public IP-to-country API (Cloudflare) to choose the default UI language. The country code is consumed in memory and never persisted.
- Strictly necessary local storage. A single key named
rr.locale(and a mirror cookierr_locale) remembers the language you selected. No advertising or third-party tracking cookies are used.
3. Legal basis
- Consent (art. 6.1.a GDPR) — for joining the waitlist or newsletter.
- Pre-contractual measures (art. 6.1.b GDPR) — for replying to partner / contact requests.
- Legitimate interest (art. 6.1.f GDPR) — for the country-only geolocation lookup, which is strictly necessary to serve content in the appropriate language.
4. Purposes
- Manage your position on the beta waitlist.
- Send you product updates only when you have opted in.
- Respond to your inquiries and partnership proposals.
- Comply with legal obligations applicable to RunwayReady.
5. Data retention
Waitlist and newsletter records are retained until you unsubscribe or request deletion. Contact submissions are retained for up to 24 months after the last interaction. Aggregated, non-identifying analytics are retained indefinitely.
6. Recipients and processors
We rely on the following service providers, all of which act as data processors under a written agreement (art. 28 GDPR):
- Google Cloud / Firebase (Ireland) — hosting, Firestore database and authentication. Data is stored within the European Economic Area.
- Cloudflare, Inc. — CDN and the country-only geolocation endpoint. No personal data is transmitted to Cloudflare beyond the standard request metadata required to serve the page.
- Email delivery provider (Nodemailer / SMTP) — for transactional confirmations.
We do not sell or rent your personal data to any third party.
7. International transfers
Where a processor stores data outside the European Economic Area, the transfer is covered by the European Commission’s Standard Contractual Clauses (SCCs) and supplementary technical measures.
8. Your rights
Under the GDPR and the LOPDGDD you have the right to access, rectify, erase, restrict processing,data portability, and to object to processing. You may also withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, write to privacy@runwayready.ai attaching a copy of your ID. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
9. Security
We apply technical and organisational measures appropriate to the risk, including TLS 1.3 in transit, encryption at rest for all production databases, role-based access control, and regular security reviews.
10. Minors
The Site is not directed at children under 14. We do not knowingly collect personal data from minors below that age, which is the threshold set by Spanish law for valid consent.
11. Changes
We may update this Privacy Policy. The “Last updated” date above always reflects the latest revision.
If you have any questions, contact us at privacy@runwayready.ai.