Privacy Notice

PRIVACY NOTICE

RUNE LABS, INC.

This is a summary of our Privacy Notice Summary. To review the complete Privacy Notice Summary, please scroll down.

At Rune Labs, the privacy and security of your personal information is important to us. If you have any questions at all about this Privacy Notice, please do not hesitate to contact us at info@runelabs.io.

TABLE OF CONTENTS

Who This Privacy Notice Applies To
What Information Do We Collect?
How Do We Use the Information We Collect?
When Do We Share Your Information?
What are Tracking Technologies, such as Cookies and Web Beacons, and How Do We Use Them?
How Do We Protect Your Personal Information?
Your Choices About Your Personal Information
Access, Delete or Correcting Personal Information
Marketing Communications
Residents of the European Economic Area and United Kingdom
Links to Other Websites
How We Respond To Do Not Track Signals
Children Under 16
Users Outside of the United States
Contact Us

Who This Privacy Notice Applies To

This Privacy Notice explains how Rune Labs collects, uses, shares, and protects personal information when you use our services. "Personal Information" means any data that can identify you.

"User," "you," and "your" refer to anyone who visits or uses our services.
This notice applies to all visitors and users of Rune Labs’ services.

How We Handle Your Information‍

Rune Labs collects and processes personal information in two ways:

As a data controller – We decide how to use your personal information.
As a data processor – We handle information for our customers or partners, who decide how it is used.

Some of the information we process may be protected health information (PHI) under HIPAA. If your data was shared with us by a healthcare provider, partner, or another company, they control how it is used. If you want to update or change that data, you should contact them directly.

Privacy Notice Updates

We may update this Privacy Notice over time. If we make important changes, we will:

Post a notice on our website
Email you (if we have your email)
Inform you in another way

Please check this page regularly for updates.

Your Agreement

By using our services, you agree to this Privacy Notice. If we update it and you continue using our services, that means you accept the changes.

What Information Do We Collect?

We collect information you provide when you:

Create an account.
Contact us.
Use our services.

This information can include your name, email, health details, and other personal data.

How Do We Use Your Information?

We use your information to:

Provide and improve our services.
Communicate with you.
Comply with legal requirements.

Sharing Your Information

We may share your information with:

Service providers who help us.
Researchers, with your permission.
Others, if required by law.

What Are Tracking Technologies Like Cookies and Web Beacons, and How Do We Use Them?

We, or companies we work with, use Tracking Technologies to collect information about how you use our services. These include:

Cookies – Small files stored on your device that help remember your preferences and improve your experience.
Web Beacons – Small images that track how people move through a website.
Log Files – Records that track your browser, device, and time spent on our services.

These tools help us:

Understand website traffic
Personalize content and ads
Improve security
Measure how well our promotions work

Managing Cookies

You can delete or block cookies, but some parts of our services may not work properly if you do. Most web browsers let you:

Stop accepting new cookies
Get alerts when cookies are used
Turn off cookies completely

For more details on managing cookies, visit: www.allaboutcookies.org/manage-cookies/.

How Web Beacons Work

Web beacons track how users move through our site. Our advertising partners may also use them to recognize you and see how you found our site.

If you want to control how your data is used for advertising, visit:

How Do We Protect Your Personal Information?

We take steps to keep your personal information safe from unauthorized access, changes, sharing, misuse, or loss. However, no system is 100% secure.

Your security also depends on you. It’s your responsibility to keep your account details private, including passwords and mobile device PINs.

Your Choices About Your Personal Information

You have options for how your personal information is used on our services. However, some information may be exempt from these choices if the law allows.

Access, Delete, or Update Your Personal Information

You can ask to see, change, or delete your personal information by:

Logging into your account and going to your account page.
Email us at info@runelabs.io.

For security reasons, we can only update or share information linked to the email address you use to contact us. We may also need to verify your identity before making any changes.

If you want to cancel your account, you can do so on your account page. Once canceled, we will delete your personal information as soon as possible, unless the law requires us to keep it. However, some information may be stored in backups or archives as needed for legal or record-keeping purposes.

Marketing Communications

We may use your information to send you updates about Rune Labs’ features, products, events, and other opportunities.

If you don’t want to receive these messages, you can:

Click “Unsubscribe” in any marketing email.
Email us at info@runelabs.io to opt out.

Even if you unsubscribe from marketing emails, we may still send you important service-related messages, such as updates to our Terms of Use or Privacy Notice.

For Residents of the European Economic Area (EEA) and the United Kingdom (UK)

Rune Labs is responsible for deciding how to collect, use, and share your personal data under this Privacy Notice. This is because we are considered the "data controller" under the General Data Protection Regulation (GDPR).

Legal Reasons for Using Your Data

We only use, share, or disclose your personal data when we have a legal reason to do so. These reasons include:

Contractual Commitments – We use your data to fulfill agreements with you, such as providing our services.
With Your Consent – In some cases, we need your permission to use your data.
Legitimate Interests – We use your data to improve our services, prevent fraud, provide security, and for customer service. We only do this when it does not unfairly affect your rights.
Legal Compliance – We may need to use or share your data to follow the law.

Your Rights

If you live in the EEA or UK, you may have certain rights over your personal data. You can ask us to:

Provide access to or a copy of the data we have about you.
Stop using your data for direct marketing.
Update incorrect or outdated information.
Delete certain data we hold about you.
Limit how we use or share your data.
Transfer your data to another service provider.
Object to how we process your data.
Withdraw your consent for certain data uses.

Some data may be exempt from these requests if we need to keep it for legal reasons or to provide our services. If you request deletion, you may no longer be able to use our services.

How to Make a Request or File a Complaint

If you want to exercise your rights or have questions, email us at info@runelabs.io. We may ask you to verify your identity before processing your request.

If you are unhappy with how we handle your data, you can file a complaint with your local data protection authority. However, we encourage you to contact us first, and we will do our best to resolve your concern.

Links to Other Websites

We may include links to other websites, but we do not control them. These sites have their own privacy policies and terms of use.

We are not responsible for their content, ads, products, or anything else on those sites.

By using our services, you agree that we are not responsible for any problems or losses caused by using or trusting these third-party websites.

How We Handle Do Not Track Signals

Some web browsers let you send a Do Not Track (DNT) signal to websites to request that they do not track your online activity. However, we do not change how we operate when we receive a DNT signal because we do not track visitors for targeted advertising. To learn more about Do Not Track, visit www.allaboutdnt.com.

Children Under 16

Our services are not designed for anyone under 16 years old. We do not intentionally collect personal information from children under 16. If you think we may have accidentally collected information from someone under 16, please email us at info@runelabs.io, and we will delete the information as required by law.

For Users Outside the United States

Rune Labs is based in the United States, and we operate our services from there. Your personal information may be collected, stored, or processed in the U.S. or other countries where we work with service providers. These countries may have different data protection laws than your own. By using our services, you agree that your information may be transferred to and stored in these countries, where authorities may access it if required by law.

Contact Us

If you have questions about this Privacy Notice or your personal information, you can contact us at: Email: info@runelabs.io

Mailing Address:
Rune Labs, Inc.
Attn: Chief Information Security Officer
2021 Fillmore St. Pmb #1052, San Francisco, CA 94115

If you have concerns about your privacy, we encourage you to reach out so we can help. If we are unable to resolve your issue, you also have the right to file a complaint with your local data protection authority.

PRIVACY NOTICE‍

Last Updated on August 6, 2024

TABLE OF CONTENTS

Applicability of this Privacy Notice
What Information Do We Collect?
How Do We Use the Information We Collect?
When We Disclose Your Personal Information
What are Tracking Technologies, such as Cookies and Web Beacons, and How Do We Use Them?
How Do We Secure Your Personal Information?
Your Choices Regarding Information
Access, Delete or Correcting Personal Information
Marketing Communications
Residents of the European Economic Area and United Kingdom
Links to Third Party Websites
How We Respond To Do Not Track Signals
Children Under 16
Users Outside of the United States
Contact Us

Applicability of this Privacy Notice

This Privacy Notice (“Privacy Notice”) applies to the Services operated by Rune Labs and explains how we collect, use, share and otherwise process information that we collect through the Services and elsewhere, including information that may be used to identify you (“Personal Information”). All capitalized terms not herein defined will have the meaning set forth in our Terms of Use.

“User,” “you” and “your” refer to the individual or entity that accesses or otherwise uses the Services, and each of your heirs, assigns, and successors.

This Privacy Notice applies to information we collect, including Personal Information of any visitor to or User of our Services. This Privacy Notice describes Rune Labs’ data practices when it processes information as a data controller. We may also process Personal Information in the role of a data processor where your Personal Information was submitted to us by one of our customers or partners. Some of the Personal Information we process may also be “protected health information,” as that term is defined under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) in our capacity as a business associate on behalf of a covered entity or business associate (as those terms are defined in HIPAA). Rune Labs does not control how these customers, partners, covered entities, or business associates use information Rune Labs processes on their behalf. If you wish to exercise any of your rights with respect to your Personal Information for Personal Information we process as a processor on behalf of our customers, partners, covered entities, or business associates please contact the applicable entity directly.

We may update this Privacy Notice from time to time. If we make material changes to this policy, we will notify you of any changes by posting notice on our Services, sending notice to the primary email address specified in your account (if applicable), or otherwise notifying you. We encourage you to periodically check the Services and this page for updates.

You acknowledge that your use of our Services indicates to us that you have read this Privacy Notice and consent to the privacy practices described, and your continued use of our Services after we publish or send a notice about any changes to this Privacy Notice indicates that you have read and consent to the updated Privacy Notice.

What Information Do We Collect?

We collect information, including Personal Information, that you give us when you create an account, contact us, or otherwise access or use our Services. We collect information you voluntarily submit to us, information from third parties, and we also automatically collect information when you access or otherwise use the Services.

a. Information you give us:

When you use our Services, you may provide information to us directly. You may provide information to us directly through:

Your use of the Services, such as when you register for an account or use our mobile applications;
Your participation in surveys, such as research surveys or surveys about our products and services;
Your communications with us, such as when you contact us for troubleshooting, support, or make inquiries about our Services;
Your communications with us in response to notifications concerning research opportunities or clinical trials that may be of interest to you;
Your transmission of user content to us, such as when you submit information in our mobile application or sync content from third-party services with our Services; and
Other communications with us or other users through the Services.

The information you give us may concern you or others and may include, but is not limited to:

Identifiers and contact information, such as your name, company name, title, email address, postal address, zip code, country, telephone number;
Survey responses;
Health information, such as medical or health conditions or symptoms, medications, medication summaries, medical history and similar information;
Information in other communications with us; and/or
Other information about you, such as your profession, gender, date of birth, profile picture.

You are not required to provide us with such information, but certain features of the Services may not be accessible or available, absent the provision of the requested information.

b. Information from non-affiliated third parties

We may also collect information about you from other parties, such as when you are referred to us by another user, or when you authorize us to collect information about you from other parties. We may also collect information about potential customers of our Services, such as healthcare professionals who may find our Services useful.

c. Information we get automatically from your use of the Services

We automatically collect certain information when you use our Services. This may include:

Details of how you use the Services, such as browser type, ISP or operating system, domain name, access time, referring or exit pages, page views, and the type of device you use.
Your internet protocol address (i.e., IP address) and, if you access the Services from a mobile application, your unique mobile device ID number and non-email authentication.
Browser and device information and information collected through Tracking Technologies (defined below), such as cookies, pixel tags, and other technologies.

How Do We Use The Information We Collect?

We use the information we collect for a variety of purposes, including to improve the Services, optimize our technology and algorithms, refine and customize our offerings and user experience, experience of our Users, and innovate ways to forward our mission.

In particular, we use the information we collect to:

Administer the Services, enable you to use its features, and improve the overall user experience.
Accomplish or further our mission of advancing therapies for complex neurological disorders.
Communicate with you, such as through email, text, SMS, telephone, or any other medium for which we have contact information so that we can provide you with information and updates about us, our work, and our community.
Communicate with you, such as through email, text, SMS, telephone, or any other medium for which we have contact information so that we can provide you with information concerning research opportunities or clinical trials that may be of interest to you.
Send information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
Respond to comments and questions and provide technical support and customer support.
Analyze how Users use the Services using analytics tools and other tools to help us understand traffic patterns and know if there are problems with the Services.
Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
Enforce our legal terms and/or legal and regulatory obligations.
Compare information for accuracy, update our records, and verify it with third parties.

We may combine information that we collect from you through the Services with information that we obtain from affiliated and nonaffiliated third parties, and information derived from any other products or services we provide.

We may also anonymize, aggregate or otherwise make such information non-personally identifiable for a variety of purposes, including those listed in this section. The use and disclosure of such de-identified information is not subject to any restrictions under this policy.

When We Disclose Your Personal Information?

We may disclose your information in the following situations:

Partners & Collaborating Organizations: Sometimes we collaborate closely with other groups to further our mission. In these cases and with your consent, we may share your name, contact information and other details you provided when making an account with our partners.
Affiliates: We may share your information with our affiliates and/or subsidiaries.
Consent/At Your Direction: We may disclose your information to nonaffiliated third parties based on your consent to do so. For example, you may direct us to allow third parties such as family members and care providers to access information in your account.
Service Providers: We work with a wide range of third party providers, notably our database administrators, cloud computing services, advertising services, data analysts, application service providers, bulk SMS services, and other non-governmental organizations.
Business Transfer: We may also transfer your Personal Information to a third party as a result of a merger, acquisition, reorganization or similar transaction, or in contemplation of such a transaction.
Legal Purposes: We may share your information when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security of the Services; and to protect the rights or property of Rune Labs.

We may also share your information with non-affiliated third parties if we have a good-faith belief that access, use, preservation, or disclosure of your Personal Information is reasonably necessary to (1) detect or protect against fraud or security issues, to enforce our Terms of Use, (2) meet any enforceable government request, (3) defend against legal claims, or protect against harm our legal rights or safety, or that of our staff or Users.

What are Tracking Technologies, such as Cookies and Web Beacons, and How Do We Use Them?

We, or third parties we do business with, may use certain technologies to automatically collect log files and other information about your usage of, and the devices you use to access, the Services (“Tracking Technologies”). For example, we may use Tracking Technologies like cookies, log files, web beacons or similar technologies to help us analyze our web page flow, customize our services, content and advertising, measure promotional effectiveness and promote trust and safety.

You may delete and block all cookies from our Services, but parts of the Services will not work.

When you access the Services, we may automatically collect certain information, including computer and connection information, browser type and version, operating system and platform details, and the time of accessing the Services.

Most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, and how to disable existing cookies. For more information about cookies and how to disable them or restrict the categories of cookies you wish to accept, you can consult the information at www.allaboutcookies.org/manage-cookies/. If you disable or restrict cookies, (a) your use of the Services may be adversely affected (and possibly entirely prevented), (b) your experience of this and other sites that use cookies to enhance or personalize your experience may be adversely affected, and (c) you may not be presented with advertising that reflects the way that you use our and other sites.

Web beacons may be used to track the traffic patterns of users from one page to another in order to maximize web traffic flow. Our third-party advertising service providers may also use web beacons, cookies, or other technologies to recognize you when you visit or use the Services and to help determine how you found the Services. If you would like more information about this and to know your choices about not having this information used by these companies, please visit: the Digital Advertising Alliance’s website, http://www.aboutads.info/, or the Network Advertising Initiative’s website, http://networkadvertising.org/consumer/opt_out.asp.

How Do We Secure Your Personal Information?

We take steps to protect your Personal Information against unauthorized access, alteration, disclosure, misuse, or destruction. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. The safety and security of your Personal Information also depends on you. You are solely responsible for keeping your account details confidential, including any access credentials like passwords or mobile device PINs.

Your Choices Regarding Your Personal Information

You have several choices with respect to the use of Personal Information on our Services, though certain information may be exempt from such requests as authorized by applicable law:

Access, Delete, or Correct Personal Information. You may request to access, correct, amend, or delete information we have about you by logging into your account and navigating to your account page or by emailing us at info@runelabs.io. For your protection, we may only share and update the information associated with the specific email address that you use to send us your request, and we may need to verify your identity before doing so. We will try to comply with such requests in a reasonably timely manner. If you wish to cancel your account, you may do so through your account page. If you do, personally identifiable information associated with your account will be deleted as soon as is reasonably practical or as required by applicable law. Please note that we may retain information in archived or backup copies as required pursuant to records retention obligations, or otherwise as authorized by law.

Marketing Communications. We may use some of the information we collect for marketing purposes, including to send you promotional communications about Rune Labs features, products, events, or other opportunities. If you wish to stop receiving these communications or to opt out of use of your information for these purposes, please follow the opt-out instructions by clicking “Unsubscribe” (or similar opt-out language) in those communications. You can also contact us at info@runelabs.io to opt out. Even if you opt out of marketing communications, we may send you service related communications, including notices of any updates to our Terms of Use or Privacy Notice.

Residents of the European Economic Area and United Kingdom.

Rune Labs is considered the “data controller” of the “personal data” (as defined under the General Data Protection Regulation) we handle under this Privacy Notice. In other words, Rune Labs is responsible for deciding how to collect, use, and disclose personal data, subject to applicable law. The laws of the European Economic Area and the United Kingdom require data controllers to tell you about the legal ground that they rely on for using, sharing, or disclosing your personal data. To the extent those laws apply, our legal grounds are as follows:

Contractual Commitments: We may use, share, or disclose personal data to honor our contractual commitments to you. For example, we will process your personal data to comply with our agreements with you, and to honor our commitments in any contracts that we have with you.
With Your Consent: Where required by law, and in some other cases, we use, share, or disclose personal data on the basis of your consent.
Legitimate Interests: In many cases, we use, share, or disclose personal data on the ground that it furthers our legitimate business interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals, such as customer service, certain promotional activities, analyzing and improving our business, providing security for the Services, preventing fraud, and managing legal issues.
Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.

Residents of the European Economic Area and United Kingdom may also have certain rights to their personal data. For example, you may request that we:

Provide access to and/or a copy of certain information we hold about you;
Prevent the processing of your information for direct marketing purposes (including any direct marketing processing based on profiling);
Update information which is out of date or incorrect;
Delete certain information that we are holding about you;
Restrict the way that we process and disclose certain information about you;
Transfer your information to a third-party provider of services;
Object to certain processing of your personal data; and
Revoke your consent for the processing of your information.

Please note that certain information may be exempt from such requests under applicable law. For example, we may retain certain information for legal compliance and to secure the Services and other products and services we may offer. We may need certain information to provide the Services to you; if you ask us to delete it, you may no longer be able to use the Services.

In addition to those rights described herein, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern. If you would like information regarding your rights under applicable law or would like to exercise any of them, contact us at info@runelabs.io. To protect your privacy and security, we take reasonable steps to verify your identity and requests before granting such requests. If we are unable to verify your identity, we may be unable to respond to your requests.

‍Links to Third Party Websites

We may provide links to other websites. We have no control over these websites and they are subject to their own terms of use and privacy policies. As such, we do not endorse and are not responsible for the availability of, or for any content, advertising, products, or other materials on or available from, these third party websites.

By using the Services, you agree that we will not be liable for any damage or loss caused by your use of or reliance on any content, advertising, products, or other materials on or available from these third party websites.

How We Respond to Do Not Track Signals

Your browser settings may allow you to automatically transmit a Do Not Track signal to websites and other online services you visit. We do not alter our practices when we receive a Do Not Track signal from a visitor’s browser because we do not track our visitors to provide targeted advertising. To find out more about Do Not Track, please visit http://www.allaboutdnt.com.

Children Under 16‍

The Services is not directed to individuals who are under age of 16 and we do not solicit nor knowingly collect Personal Information from children under the age of 16. If you believe that we have unknowingly collected any Personal Information from someone under the age of 16, please contact us immediately at info@runelabs.io and the information will be deleted as required by applicable law.

A Note to Users Outside the United States

Rune Labs is based in the United States and the Services are controlled and operated by us from the United States. Your Personal Information may be collected, transferred to, stored and otherwise processed in any country where we have facilities or in which we engage service providers, and, by using the Services, you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country and where the information may be accessible to law enforcement and national security authorities of that jurisdiction.

Contact Us

If you have any questions about this Privacy Notice, your Personal Information, or the Services, you can contact info@runelabs.io or by emailing us at the below address:

Rune Labs, Inc.

c/o Chief Information Security Officer

649 Irving St, San Francisco CA 94122

Please contact us if you have any complaints or concerns with respect to your privacy. If you believe we are unable to assist you, you have the right to lodge a complaint with a supervisory authority in the relevant jurisdiction. However, we are committed to working with you to resolve any complaint or concern you may have with respect to your privacy.