Your personal data may be stored and processed in the United States or other countries that may have different or less protective privacy laws than your home country. Using the service is treated as acknowledgment of this transfer.
This analysis describes what Runway's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
For EU and UK users, international data transfers to the United States require a lawful transfer mechanism under GDPR Chapter V, such as Standard Contractual Clauses. The policy's reliance on user acknowledgment through service use as a consent mechanism for transfers may not satisfy GDPR transfer requirements.
Interpretive note: The policy does not specify which GDPR-compliant international transfer mechanism Runway relies upon, creating uncertainty about the legal basis for transfers of EU and UK user data to the United States.
Explicitly discloses cross-border data transfer practices and lack of equivalent data protection guarantees, critical for GDPR and international privacy compliance.
View full change record →Removal of the explicit International Data Transfer provision may indicate it was replaced or integrated into the new GDPR and multi-state privacy rights sections.
View full change record →EU and UK users' personal data is transferred to and processed in the United States. Under GDPR, this transfer must be supported by an appropriate legal mechanism such as Standard Contractual Clauses; the policy does not describe which transfer mechanism Runway relies upon.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Runway is headquartered in the United States. Your personal data may be collected in, transferred to, and stored in the United States or another jurisdiction that is different from your home jurisdiction and that may not have the same data protection laws as your home jurisdiction. By using our Service, you acknowledge such transfer, storage and processing.Excerpt from Runway's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly engages GDPR Chapter V (Articles 44-49) on international data transfers, and UK GDPR equivalent provisions.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
For EU and UK users, international data transfers to the United States require a lawful transfer mechanism under GDPR Chapter V, such as Standard Contractual Clauses. The policy's reliance on user acknowledgment through service use as a consent mechanism for transfers may not satisfy GDPR transfer requirements.
EU and UK users' personal data is transferred to and processed in the United States. Under GDPR, this transfer must be supported by an appropriate legal mechanism such as Standard Contractual Clauses; the policy does not describe which transfer mechanism Runway relies upon.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Runway.