Privacy Policy

1. Who we are

This policy explains how LongRun handles personal information through its website, workspace and API. The operator responsible for this service is identified under “Operator and contact details” below.

We decide how account and service-administration information is used. When you submit personal data about other people for processing, you are responsible for having the authority and lawful basis to do so; we process that content to provide the service you request.

2. Information we handle

We handle your email address, name, password authentication records, workspace settings and account-verification information. We also process files, URLs, template content, workflow definitions, input data and outputs that you submit or generate. Run history can include input and output previews, errors, file metadata, timestamps and delivery records. Credentials you configure for integrations, API-key records and webhook destinations are used to provide those features. Requests may also produce network, security and service logs, including IP addresses and request metadata.

3. How and why we use information

We use this information to create and secure your account, execute requested processing, store and retrieve files, deliver outputs, send verification and password-reset emails, diagnose failures and prevent abuse.

Where applicable, we rely on performance of our agreement with you for the service, legitimate interests for proportionate security and troubleshooting, and legal obligations for required disclosures or recordkeeping. Where consent is required, we seek it separately; acknowledging this policy is not blanket consent to unrelated uses.

4. Files, URLs and integrations

Submitting a URL instructs LongRun to retrieve content from that address. The destination server may receive the request and its technical metadata. If you configure an external storage destination or webhook, LongRun sends the selected content, results or event details there. Those recipients handle information under their own terms and privacy practices.

A signed download link can be used by anyone who possesses it until it expires; treat it as confidential. A link expiring does not necessarily mean the underlying file has been deleted.

5. How we share information

We share information with service providers that help us host and secure LongRun, store files, and deliver account emails. The information shared depends on the service being provided.

When you connect an external application or delivery destination, we send the information needed to carry out your instructions. The receiving service’s own terms and privacy policy also apply.

We may disclose information to comply with a legal obligation, investigate misuse, or protect the rights and security of LongRun and its users.

6. Retention and deletion

Temporary files have an expiry time shown in their metadata. Saved files are retained until you delete them or the workspace is erased, subject to service limits and legal obligations. Expired or deleted files may be removed through background cleanup rather than instant physical erasure.

Run records and previews can remain after a file expires. Account and workspace records are kept while needed to provide your account, respond to support requests, investigate security incidents or meet legal obligations. Verification and reset credentials are short-lived. Residual copies in logs or backups may remain until their retention cycle ends. Records required for legal obligations or resolving disputes may be retained for those purposes. Copies already sent to an external destination must be managed with that provider.

7. Cookies and browser storage

LongRun uses a session cookie to keep you signed in and browser storage to remember interface choices such as tabs and navigation state. These support the requested service rather than advertising. You can clear them through your browser; doing so may sign you out or reset preferences.

8. International processing and security

Hosting, storage and email services may process information outside your country, including in the United Kingdom. International processing is subject to applicable data-protection requirements and the safeguards available under our provider arrangements.

LongRun uses access controls and protected authentication and integration credentials, but no online service can guarantee absolute security. Keep API keys and file links private and avoid submitting information that requires safeguards you have not confirmed with us.

9. Your choices and rights

You can manage files and account settings in the app. To request access, correction, deletion, restriction, objection or a portable copy of personal data where applicable, contact us using the details below. If processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Rights depend on applicable law and may have exceptions; we may need to verify your identity. If your information was submitted by another customer, contacting that customer may be necessary to handle the request. You may also complain to the Nigeria Data Protection Commission at ndpc.gov.ng or another competent supervisory authority.

10. Children

LongRun is intended for adults and business use, not children. Do not create an account if you are under 18. Contact us if you believe a child has provided account information so we can investigate and take appropriate action.

11. Policy updates

We will update the date on this page when the policy changes and provide additional notice of material changes where required. Use the contact details below for questions about this policy.

12. Operator and contact details

LongRun is operated by Joseph Joshua, trading as LongRun.

Country: Nigeria. For questions about these documents or to make a privacy request, email [email protected].