Privacy Policy

What we collect

• Technical: standard server logs, Stripe transaction metadata (email, amount, success/fail).
• For paid audits: the model name, number of scenarios, and (temporarily) the API key + prompts you supply so we can run the job.
• Optional: email for delivery and account history if you create one.

What we do NOT do

• We do not sell, rent, or train models on customer prompts, keys, or results.
• We do not share raw private audit data with third parties except as required to deliver the service or by law.
• Free demo runs use heuristics or public endpoints; nothing private is involved.

Retention

One-off private: ephemeral processing. Artifacts (JSON, report) are delivered to you and deleted after 30 days unless you request longer retention. Enterprise: per your contract (deletion on demand).

Your rights

Email tim@justrunthatshit.com to request deletion of any data associated with your email or a specific job. We confirm within 7 days.

Third parties

Stripe (payments), the LLM providers you choose (your keys go directly to them), and hosting providers. That's it for normal operation.

This is the honest policy of a small operation. If you need a full DPA or custom language for Enterprise, we will negotiate it in the contract. Last updated: 2026.