Runway Privacy Policy

This Privacy Policy, effective May 11, 2026, governs Runway AI, Inc.'s collection, use, and disclosure of personal data through its website, mobile application, AI content creation services, and related marketing activities, with stated legal bases including contractual necessity, legitimate interests, consent, and legal compliance for EEA/UK users under GDPR. The policy authorizes collection of identifiers, demographic data, account credentials, professional data, user-generated content including prompts, images, audio and video, biometric data such as voice data and face scans, device data, and browsing activity, and permits disclosure to vendors, advertising and analytics partners, affiliates, business partners, payment processors, account administrators, and prospective business transferees. The biometric data provision is operationally distinct: the policy states that voice data and face scans submitted through certain product features may constitute biometric identifiers under applicable law, and asserts use is limited to providing the requested service, though this assertion may require evaluation under state biometric privacy laws including Illinois BIPA, Texas CUBI, and Washington's biometric statutes. The policy engages GDPR and UK GDPR, CCPA and numerous US state privacy frameworks across more than twenty named states, and lists legitimate interests as a legal basis for a broad range of processing activities, which may require evaluation under Article 6 GDPR balancing requirements; the explicit acknowledgment that disclosure to advertising and analytics partners may constitute a CCPA 'sale' and the policy's support for Global Privacy Control signals are material compliance considerations for US-facing operations.