Runway
runway.mlRunway's AI tools present moderate risk for professional use. While users retain ownership of their content, the platform claims broad perpetual rights to use all inputs and outputs for model training without opt-out options. Data handling practices are vague, with limited information about retention, deletion, and third-party sharing. The platform lacks enterprise-grade compliance certifications and security disclosures.
AI Transparency Facts
Independent analysis by TermsWatchdog · © 2026 TermsWatchdog
Input Data Ownership
Users retain ownership of their inputs (prompts and uploaded content). Runway explicitly states they do not claim ownership of user inputs.
Output Data Ownership
Users own the AI-generated outputs and can use them commercially without restrictions, provided they comply with the terms of service.
Training Data Usage
Runway explicitly states they use all user inputs and outputs to train and improve their AI models. Users grant a perpetual, irrevocable license for this purpose with no apparent opt-out mechanism.
Data Retention & Deletion
The policies provide no specific data retention schedules or deletion timelines. Runway disclaims responsibility for data storage and may retain public content indefinitely. The privacy policy was incomplete in the provided excerpt.
Third-Party Data Sharing
The terms mention third-party payment processors (Stripe) but are otherwise vague about data sharing practices. The incomplete privacy policy prevents a full assessment of third-party sharing policies.
Opt-Out Rights
The terms provide no opt-out mechanisms for data collection, model training, or other data uses. Users must accept all data practices to use the service.
Compliance & Certifications
No compliance frameworks or security certifications are mentioned in the available documents. No references to GDPR, CCPA, SOC 2, or other standard compliance frameworks.
Model Explainability & Auditability
No provisions for model transparency, explainability, or enterprise auditing capabilities are mentioned in the terms.
Security Practices & Breach History
No specific security practices, controls, or breach notification procedures are disclosed in the available documents. Generic disclaimers about security risks are present.
Enterprise vs. Consumer Risk Delta
Separate enterprise terms are referenced but not provided. The standard terms apply broadly to all users with no clear differentiation between free and paid tiers regarding data handling.
Human Review of User Inputs
Runway reserves broad rights to monitor, review, and access all user content including inputs and outputs through both automated and manual means.
Regulatory & Litigation Exposure
Runway will cooperate with law enforcement and disclose user data as required by legal process. They reserve rights to investigate violations and refer matters to authorities.
PII & SPI Data Inventory
The privacy policy mentions collection of identifiers, contact data, and demographic information. The incomplete privacy policy prevents full assessment of SPI collection practices.
You've read all 15 risk ratings for Runway. Create a free account to see the exact policy wording behind each rating.