For EU and UK users, Runway relies on 'legitimate interests' as its legal basis for a broad set of data processing activities including analytics, business improvement, security, and fraud prevention. This means Runway has assessed that its business interests outweigh user privacy interests for these activities.
This analysis describes what Runway's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Legitimate interests is one of the broadest GDPR legal bases and is used here to cover analytics, service improvement, security, and fraud prevention. EU and UK users have the right to object to processing carried out under legitimate interests, which could limit how Runway processes their data.
Interpretive note: The scope of legitimate interests reliance and whether specific documented balancing assessments exist cannot be confirmed from the policy text alone; enforcement interpretation by supervisory authorities may constrain the breadth of this basis.
EU and UK users have the right to object to data processing Runway conducts under legitimate interests, which covers analytics, business improvement, and security activities. Exercising this right may affect service functionality. Users can contact Runway at privacy@runwayml.com to exercise their right to object.
How other platforms handle this
to object to profiling activities based on our own legitimate interests
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
"Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, analyzing and improving our business, providing security for the Service and other products and services we may offer, preventing fraud, and managing legal issues.Excerpt from Runway's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly engages GDPR Article 6(1)(f) and UK GDPR equivalent provisions on legitimate interests as a lawful basis for processing.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Legitimate interests is one of the broadest GDPR legal bases and is used here to cover analytics, service improvement, security, and fraud prevention. EU and UK users have the right to object to processing carried out under legitimate interests, which could limit how Runway processes their data.
EU and UK users have the right to object to data processing Runway conducts under legitimate interests, which covers analytics, business improvement, and security activities. Exercising this right may affect service functionality. Users can contact Runway at privacy@runwayml.com to exercise their right to object.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Runway.