Privacy Policy

Short version: We are a tiny research + tooling operation. We do not train on your data. Private audit keys and prompts are used only to deliver the service you paid for and are deleted promptly unless you explicitly ask for retention (Enterprise).

What we collect

• Technical: standard server logs, Stripe transaction metadata (email, amount, success/fail).
• For paid audits: the model name, number of scenarios, and (temporarily) the API key + prompts you supply so we can run the job.
• Optional: email for delivery and account history if you create one.

What we do NOT do

• We do not sell, rent, or train models on customer prompts, keys, or results.
• We do not share raw private audit data with third parties except as required to deliver the service (e.g. the model provider you chose) or by law.
• Free demo runs use heuristics or public endpoints; nothing private is involved.

Retention

One-off private: ephemeral processing. Artifacts (JSON, report) delivered to you and deleted from our systems after 30 days unless you request longer retention. Enterprise: per your contract (you can choose deletion on demand).

Your rights

Email tim@justrunthatshit.com to request deletion of any data associated with your email or a specific job. We will confirm within 7 days.

Third parties

Stripe (payments), the LLM providers you choose (your keys go directly to them), and hosting providers. That's it for normal operation.

This is the honest policy of a small operation. If you need a full DPA or custom language for Enterprise, we will negotiate it in the contract. Last updated: 2026.