Privacy Policy

Effective November 8, 2026 · Version 2026-11-08

Earlier versions: August 27, 2026 (version 2026-08-27)

RunTight LLC, a Florida limited liability company ("RunTight," "we," "us," or "our"), operates the maintenance management software available at getruntight.com ("the Service"). RunTight is based in Florida, United States. This Privacy Policy explains what data we collect, how we use it, and what choices you have, wherever you use the Service.

This Policy describes our current data practices. It is provided for informational purposes and is not legal advice; consult a qualified attorney for guidance specific to your jurisdiction. Contact us before using the Service if you need clarification about a practice that is material to your organization.

1. DATA WE COLLECT

Account Information

When you sign up, we collect your email address, name, and organization name. This is used to create your account and identify you within your team.

Maintenance Data

Data you enter into RunTight includes equipment records, work orders, PM schedules, parts inventory, maintenance logs, meter readings, and checklists. This data belongs to your organization and is used to provide, secure, support, and legally administer the Service.

Usage Data

We collect basic server logs (IP address, browser type, pages visited, timestamps) to keep the Service running and diagnose issues. With your permission, we use first-party attribution and Vercel Analytics and Speed Insights to understand page visits, feature use, and aggregated performance. We do not use advertising trackers or track you across unrelated sites.

2. HOW WE USE YOUR DATA

  • To provide and operate the RunTight Service.
  • To send transactional emails (account verification, password resets, work order notifications).
  • To respond to support requests.
  • To monitor service health and fix bugs.
  • To enforce our Terms of Service.

We do not sell your data. We do not use your maintenance data for advertising. We do not share your data with third parties for their marketing purposes.

3. DATA STORAGE AND SECURITY

Application data is stored through Supabase in the project's configured hosting region. Data is encrypted in transit (TLS), and provider-managed storage encryption is used at rest. Row-level security, scoped server credentials, and application authorization checks help separate tenant data. Authorized service operations may access data when needed to operate, secure, support, or legally administer the Service.

No system is 100% secure. We take reasonable measures to protect your data, but we cannot guarantee absolute security.

4. OFFLINE DATA (PWA)

RunTight functions as a Progressive Web App (PWA) with offline capabilities. When you use RunTight offline, data is temporarily stored in your browser's IndexedDB on your device. This data syncs to our servers when your device reconnects to the internet. Clearing your browser data will remove the local offline cache.

5. COOKIES

We use essential cookies and local storage to maintain your login session, security, and application preferences. If you accept or decline optional analytics, we store your choice in local storage and a first-party preference cookie for up to one year. If you accept, we may also set a first-party attribution cookie for up to 90 days. If you decline, nonessential attribution and analytics are not loaded, and any prior attribution cookie is removed. You can manage that browser's choice on the Privacy Policy page, from Help, or from Settings > Profile when signed in. We do not use third-party advertising cookies.

6. THIRD-PARTY SERVICES

We use the following third-party services to operate RunTight:

  • Supabase: database, authentication, and file storage.
  • Vercel: application hosting, deployment, and optional consented analytics.
  • Stripe: payment processing if and when billing is enabled for your account. Stripe handles payment card data directly; we do not store card numbers.
  • Resend: transactional and support email delivery.
  • Cloudflare Turnstile: signup, login, and password-reset abuse prevention when the production CAPTCHA control is enabled.
  • Browser push services (for example those run by Google, Apple, Mozilla, or Microsoft): delivery of push notifications you turn on in your browser or on your phone.

These providers process data on our behalf to run the Service, under their data processing terms. Stripe also processes payment data as an independent controller for its own legal, fraud-prevention, and compliance purposes. Each service has its own privacy policy. We encourage you to review them.

7. YOUR RIGHTS

Depending on applicable law, you may be able to:

  • Access your data by viewing and exporting maintenance data through the app.
  • Correct account information and maintenance records within the app.
  • Request additional data export by using the in-app exports and contacting us if you need records outside their listed scope.
  • Request deletion of your account and associated data. After verifying the request and your authority over the workspace, we will provide the applicable timeline. Some data may be retained where required for legal, security, fraud-prevention, dispute, or billing purposes.

To submit a request, email support@getruntight.com.

8. DATA RETENTION

We generally retain workspace data while the account is active. A verified deletion request is handled under the then-current deletion procedure, including any required retention or provider-backup steps. Log and backup retention varies by data type, provider, security need, and configured plan; contact us for current request-specific details.

9. CHILDREN'S PRIVACY

RunTight is a business application. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it as appropriate.

10. YOUR ORGANIZATION'S DATA AND OUR ROLE

Maintenance data, and the names and contact details of the people your organization adds to its workspace, are controlled by your organization. For that data, RunTight processes personal data on your organization's behalf and under its instructions, which are given through the Service and the Terms of Service. Under the GDPR and UK GDPR, your organization is the controller and RunTight is its processor; under the CCPA, RunTight is a service provider.

RunTight is the controller of the data we use for our own purposes: account sign-in and security, billing, support conversations, service emails, and website and product analytics.

If you are a member of a workspace and want to access, correct, or delete personal data your organization controls, please contact your workspace administrator first. If you contact us instead, we may pass your request to that organization.

11. INTERNATIONAL USERS AND DATA TRANSFERS

RunTight is operated from the United States, and our service providers process data in the United States and in other countries where they operate. If you use the Service from outside the United States, your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those where you live.

When we or our providers transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another transfer mechanism recognized by applicable law, such as a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

12. GDPR, UK GDPR, AND CCPA

If you are located in the EEA, the UK, Switzerland, or California, you may have additional rights under the General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection, the California Consumer Privacy Act (CCPA), or other applicable laws.

Where the GDPR or UK GDPR applies to data we control, we rely on these legal bases:

  • Performance of a contract: to create and run your account and workspace, provide the Service, process payments, and send service emails.
  • Legitimate interests: to keep the Service secure, prevent abuse and fraud, diagnose and fix problems, respond to support requests, and understand how the Service is used in aggregate, where those interests are not overridden by your rights.
  • Consent: for optional analytics and attribution cookies. You can withdraw consent at any time from the Privacy Policy page, from Help, or from Settings > Profile.
  • Legal obligation: to keep billing and tax records and to respond to lawful requests.

Your Rights

Depending on coverage and applicable exceptions, these may include:

  • The right to know what personal data we collect and why.
  • The right to access, correct, or delete personal data.
  • The right to data portability.
  • The right to restrict or object to processing based on legitimate interests.
  • The right to withdraw consent at any time, without affecting processing that happened before you withdrew it.
  • The right to opt out of the sale of personal data; we do not sell personal data.
  • The right to non-discrimination for exercising covered privacy rights.
  • The right to lodge a complaint with your local data protection authority.

Contact support@getruntight.com to submit a request. We will respond to a verified request within the timeframe required by applicable law, which under the GDPR and UK GDPR is generally one month.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by applicable law and may require affirmative acknowledgement. The version and effective date appear at the top of this document.

14. CONTACT

Questions about this Privacy Policy or our data handling may be sent to RunTight LLC at support@getruntight.com.

Analytics preferences for this browser

Optional analytics

Loading this browser's preference…

This choice is stored in local browser storage and a first-party preference cookie for up to one year. Clearing site data or using another browser will require a new choice.