Privacy Policy
This policy explains what information Run402 collects, how we use it, and the choices you have. We keep it short and readable on purpose.
01Information we collect
Account information such as your name, email, and organization when you sign up.
Usage and billing metadata generated when you protect routes and process payments — we store the minimum required to power analytics and reconciliation.
We do not store your end users’ payment card details; those are handled directly by Stripe.
02How we use information
To provide, maintain, and improve the Run402 service.
To surface analytics, prevent abuse, and comply with legal obligations.
We never sell your data, and we never train third-party models on your API traffic.
03Data retention
We retain account and billing records for as long as your account is active, and as required by law thereafter.
You can request deletion of your account and associated data at any time.
04Security
Data is encrypted in transit and at rest. Access is restricted on a need-to-know basis and audited.
Your API traffic runs inside your own infrastructure — the Run402 SDK does not proxy request bodies through our servers.
05Your rights
Depending on your region, you may have rights to access, correct, export, or delete your personal data.
Contact legal@run402.dev to exercise any of these rights.
Questions about this policy? Email legal@run402.dev.