Privacy Notice

RUNE LABS, INC.

PRIVACY NOTICE

Last Updated on August 6, 2024

At Rune Labs, the privacy and security of your personal information is important to us. If you have any questions at all about this Privacy Notice, please do not hesitate to contact us at info@runelabs.io.

TABLE OF CONTENTS

Applicability of this Privacy Notice
What Information Do We Collect?
How Do We Use the Information We Collect?
When We Disclose Your Personal Information
What are Tracking Technologies, such as Cookies and Web Beacons, and How Do We Use Them?
How Do We Secure Your Personal Information?
Your Choices Regarding Information
Access, Delete or Correcting Personal Information
Marketing Communications
Residents of the European Economic Area and United Kingdom
Links to Third Party Websites
How We Respond To Do Not Track Signals
Children Under 16
Users Outside of the United States
Contact Us

Applicability of this Privacy Notice

This Privacy Notice (“Privacy Notice”) applies to the Services operated by Rune Labs and explains how we collect, use, share and otherwise process information that we collect through the Services and elsewhere, including information that may be used to identify you (“Personal Information”). All capitalized terms not herein defined will have the meaning set forth in our Terms of Use.

“User,” “you” and “your” refer to the individual or entity that accesses or otherwise uses the Services, and each of your heirs, assigns, and successors.

This Privacy Notice applies to information we collect, including Personal Information of any visitor to or User of our Services. This Privacy Notice describes Rune Labs’ data practices when it processes information as a data controller. We may also process Personal Information in the role of a data processor where your Personal Information was submitted to us by one of our customers or partners. Some of the Personal Information we process may also be “protected health information,” as that term is defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) in our capacity as a business associate on behalf of a covered entity or business associate (as those terms are defined in HIPAA). Rune Labs does not control how these customers, partners, covered entities, or business associates use information Rune Labs processes on their behalf. If you wish to exercise any of your rights with respect to your Personal Information for Personal Information we process as a processor on behalf of our customers, partners, covered entities, or business associates please contact the applicable entity directly.

We may update this Privacy Notice from time to time. If we make material changes to this policy, we will notify you of any changes by posting notice on our Services, sending notice to the primary email address specified in your account (if applicable), or otherwise notifying you. We encourage you to periodically check the Services and this page for updates.

You acknowledge that your use of our Services indicates to us that you have read this Privacy Notice and consent to the privacy practices described, and your continued use of our Services after we publish or send a notice about any changes to this Privacy Notice indicates that you have read and consent to the updated Privacy Notice.

What Information Do We Collect?

We collect information, including Personal Information, that you give us when you create an account, contact us, or otherwise access or use our Services. We collect information you voluntarily submit to us, information from third parties, and we also automatically collect information when you access or otherwise use the Services.

a. Information you give us:

When you use our Services, you may provide information to us directly. You may provide information to us directly through:

Your use of the Services, such as when you register for an account or use our mobile applications;
Your participation in surveys, such as research surveys or surveys about our products and services;
Your communications with us, such as when you contact us for troubleshooting, support, or make inquiries about our Services;
Your communications with us in response to notifications concerning research opportunities or clinical trials that may be of interest to you;
Your transmission of user content to us, such as when you submit information in our mobile application or sync content from third-party services with our Services; and
Other communications with us or other users through the Services.

The information you give us may concern you or others and may include, but is not limited to:

Identifiers and contact information, such as your name, company name, title, email address, postal address, zip code, country, telephone number;
Survey responses;
Health information, such as medical or health conditions or symptoms, medications, medication summaries, medical history and similar information;
Information in other communications with us; and/or
Other information about you, such as your profession, gender, date of birth, profile picture.

You are not required to provide us with such information, but certain features of the Services may not be accessible or available, absent the provision of the requested information.

b. Information from non-affiliated third parties

We may also collect information about you from other parties, such as when you are referred to us by another user, or when you authorize us to collect information about you from other parties. We may also collect information about potential customers of our Services, such as healthcare professionals who may find our Services useful.

c. Information we get automatically from your use of the Services

We automatically collect certain information when you use our Services. This may include:

Details of how you use the Services, such as browser type, ISP or operating system, domain name, access time, referring or exit pages, page views, and the type of device you use.
Your internet protocol address (i.e., IP address) and, if you access the Services from a mobile application, your unique mobile device ID number and non-email authentication.
Browser and device information and information collected through Tracking Technologies (defined below), such as cookies, pixel tags, and other technologies.

How Do We Use The Information We Collect?

We use the information we collect for a variety of purposes, including to improve the Services, optimize our technology and algorithms, refine and customize our offerings and user experience, experience of our Users, and innovate ways to forward our mission.

In particular, we use the information we collect to:

Administer the Services, enable you to use its features, and improve the overall user experience.
Accomplish or further our mission of advancing therapies for complex neurological disorders.
Communicate with you, such as through email, text, SMS, telephone, or any other medium for which we have contact information so that we can provide you with information and updates about us, our work, and our community.
Communicate with you, such as through email, text, SMS, telephone, or any other medium for which we have contact information so that we can provide you with information concerning research opportunities or clinical trials that may be of interest to you.
Send information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
Respond to comments and questions and provide technical support and customer support.
Analyze how Users use the Services using analytics tools and other tools to help us understand traffic patterns and know if there are problems with the Services.
Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
Enforce our legal terms and/or legal and regulatory obligations.
Compare information for accuracy, update our records, and verify it with third parties.

We may combine information that we collect from you through the Services with information that we obtain from affiliated and nonaffiliated third parties, and information derived from any other products or services we provide.

We may also anonymize, aggregate or otherwise make such information non-personally identifiable for a variety of purposes, including those listed in this section. The use and disclosure of such de-identified information is not subject to any restrictions under this policy.

When We Disclose Your Personal Information?

We may disclose your information in the following situations:

Partners & Collaborating Organizations: Sometimes we collaborate closely with other groups to further our mission. In these cases and with your consent, we may share your name, contact information and other details you provided when making an account with our partners.
Affiliates: We may share your information with our affiliates and/or subsidiaries.
Consent/At Your Direction: We may disclose your information to nonaffiliated third parties based on your consent to do so. For example, you may direct us to allow third parties such as family members and care providers to access information in your account.
Service Providers: We work with a wide range of third party providers, notably our database administrators, cloud computing services, advertising services, data analysts, application service providers, bulk SMS services, and other non-governmental organizations.
Business Transfer: We may also transfer your Personal Information to a third party as a result of a merger, acquisition, reorganization or similar transaction, or in contemplation of such a transaction.
Legal Purposes: We may share your information when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of the Services; and to protect the rights or property of Rune Labs.

We may also share your information with non-affiliated third parties if we have a good-faith belief that access, use, preservation, or disclosure of your Personal Information is reasonably necessary to (1) detect or protect against fraud or security issues, to enforce our Terms of Use, (2) meet any enforceable government request, (3) defend against legal claims, or protect against harm our legal rights or safety, or that of our staff or Users.

What are Tracking Technologies, such as Cookies and Web Beacons, and How Do We Use Them?

We, or third parties we do business with, may use certain technologies to automatically collect log files and other information about your usage of, and the devices you use to access, the Services (“Tracking Technologies”). For example, we may use Tracking Technologies like cookies, log files, web beacons or similar technologies to help us analyze our web page flow, customize our services, content and advertising, measure promotional effectiveness and promote trust and safety.

You may delete and block all cookies from our Services, but parts of the Services will not work.

When you access the Services, we may automatically collect certain information, including computer and connection information, browser type and version, operating system and platform details, and the time of accessing the Services.

Most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, and how to disable existing cookies. For more information about cookies and how to disable them or restrict the categories of cookies you wish to accept, you can consult the information at www.allaboutcookies.org/manage-cookies/. If you disable or restrict cookies, (a) your use of the Services may be adversely affected (and possibly entirely prevented), (b) your experience of this and other sites that use cookies to enhance or personalize your experience may be adversely affected, and (c) you may not be presented with advertising that reflects the way that you use our and other sites.

Web beacons may be used to track the traffic patterns of users from one page to another in order to maximize web traffic flow. Our third-party advertising service providers may also use web beacons, cookies, or other technologies to recognize you when you visit or use the Services and to help determine how you found the Services. If you would like more information about this and to know your choices about not having this information used by these companies, please visit: the Digital Advertising Alliance’s website, http://www.aboutads.info/, or the Network Advertising Initiative’s website, http://networkadvertising.org/consumer/opt_out.asp.

How Do We Secure Your Personal Information?

We take steps to protect your Personal Information against unauthorized access, alteration, disclosure, misuse, or destruction. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. The safety and security of your Personal Information also depends on you. You are solely responsible for keeping your account details confidential, including any access credentials like passwords or mobile device PINs.

Your Choices Regarding Your Personal Information

You have several choices with respect to the use of Personal Information on our Services, though certain information may be exempt from such requests as authorized by applicable law:

Access, Delete, or Correct Personal Information. You may request to access, correct, amend, or delete information we have about you by logging into your account and navigating to your account page or by emailing us at info@runelabs.io. For your protection, we may only share and update the information associated with the specific email address that you use to send us your request, and we may need to verify your identity before doing so. We will try to comply with such requests in a reasonably timely manner. If you wish to cancel your account, you may do so through your account page. If you do, personally identifiable information associated with your account will be deleted as soon as is reasonably practical or as required by applicable law. Please note that we may retain information in archived or backup copies as required pursuant to records retention obligations, or otherwise as authorized by law.

Marketing Communications. We may use some of the information we collect for marketing purposes, including to send you promotional communications about Rune Labs features, products, events, or other opportunities. If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking “Unsubscribe” (or similar opt-out language) in those communications. You can also contact us at info@runelabs.io to opt out. Even if you opt out of marketing communications, we may send you service related communications, including notices of any updates to our Terms of Use or Privacy Notice.

Residents of the European Economic Area and United Kingdom.

Rune Labs is considered the “data controller” of the “personal data” (as defined under the General Data Protection Regulation) we handle under this Privacy Notice. In other words, Rune Labs is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the European Economic Area and the United Kingdom require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows:

Contractual Commitments: We may use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to comply with our agreements with you, and to honor our commitments in any contracts that we have with you.
With Your Consent: Where required by law, and in some other cases, we use, share, or disclose personal data on the basis of your consent.
Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, certain promotional activities, analyzing and improving our business, providing security for the Services, preventing fraud, and managing legal issues.
Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.

Residents of the European Economic Area and United Kingdom may also have certain rights to their personal data. For example, you may request that we:

Provide access to and/or a copy of certain information we hold about you;
Prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling);
Update information which is out of date or incorrect;
Delete certain information that we are holding about you;
Restrict the way that we process and disclose certain information about you;
Transfer your information to a third-party provider of services;
Object to certain processing of your personal data; and
Revoke your consent for the processing of your information.

Please note that certain information may be exempt from such requests under applicable law. For example, we may retain certain information for legal compliance and to secure the Services and other products and services we may offer. We may need certain information to provide the Services to you; if you ask us to delete it, you may no longer be able to use the Services.

In addition to those rights described herein, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern. If you would like information regarding your rights under applicable law or would like to exercise any of them, contact us at info@runelabs.io. To protect your privacy and security, we take reasonable steps to verify your identity and requests before granting such requests. If we are unable to verify your identity, we may be unable to respond to your requests.

‍Links to Third Party Websites

We may provide links to other websites. We have no control over these websites and they are subject to their own terms of use and privacy policies. As such, we do not endorse and are not responsible for the availability of, or for any content, advertising, products, or other materials on or available from, these third party websites.

By using the Services, you agree that we will not be liable for any damage or loss caused by your use of or reliance on any content, advertising, products, or other materials on or available from these third party websites.

How We Respond to Do Not Track Signals

Your browser settings may allow you to automatically transmit a Do Not Track signal to websites and other online services you visit. We do not alter our practices when we receive a Do Not Track signal from a visitor’s browser because we do not track our visitors to provide targeted advertising. To find out more about Do Not Track, please visit http://www.allaboutdnt.com.

Children Under 16‍

The Services is not directed to individuals who are under age of 16 and we do not solicit nor knowingly collect Personal Information from children under the age of 16. If you believe that we have unknowingly collected any Personal Information from someone under the age of 16, please contact us immediately at info@runelabs.io and the information will be deleted as required by applicable law.

A Note to Users Outside the United States

Rune Labs is based in the United States and the Services are controlled and operated by us from the United States. Your Personal Information may be collected, transferred to, stored and otherwise processed in any country where we have facilities or in which we engage service providers, and, by using the Services, you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country and where the information may be accessible to law enforcement and national security authorities of that jurisdiction.

Contact Us

If you have any questions about this Privacy Notice, your Personal Information, or the Services, you can contact info@runelabs.io or by emailing us at the below address:

Rune Labs, Inc.

c/o Chief Information Security Officer

649 Irving St, San Francisco CA 94122

Please contact us if you have any complaints or concerns with respect to your privacy. If you believe we are unable to assist you, you have the right to lodge a complaint with a supervisory authority in the relevant jurisdiction. However, we are committed to working with you to resolve any complaint or concern you may have with respect to your privacy.