Privacy Policy

Effective Date: April 7, 2026

Norrab Software LLC (“Norrab,” “we,” “us,” or “our”) operates RunbookAssembly (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and Service.

1. Information We Collect

a) Account and Profile Information

  • Name
  • Email address
  • Password hash (we do not store plaintext passwords)
  • Organization/team membership and role
  • Security settings (for example, 2FA status)

b) Customer Content

  • Runbooks, templates, rows/columns/cell values
  • Execution data, approvals, comments, notes, and related metadata
  • Imported data (for example, spreadsheet/document imports)

c) Usage and Technical Information

  • Login/logout and activity events
  • IP address, browser/user-agent, device/browser metadata
  • Timestamps, error logs, and audit logs
  • Performance and diagnostic data

d) Integrations Data (if enabled)

  • Data from connected services (for example, Jira, SSO providers, email providers)
  • OAuth identifiers/tokens needed for integration functionality

2. How We Use Information

  • Provide, maintain, and secure the Service
  • Authenticate users and enforce access controls
  • Enable collaboration, sharing, and notifications
  • Process imports/exports and workflow actions
  • Provide customer support
  • Monitor reliability, prevent abuse, and improve product quality
  • Comply with legal obligations

3. AI Features and Uploaded Content

If AI-assisted features are used, submitted content may be processed to generate suggestions, summaries, or structured runbook data. We do not use private customer content to train public foundation models unless explicitly stated and agreed in writing. Temporary files used during processing are retained only as needed for processing and security/audit purposes, then deleted according to retention settings.

4. Legal Bases (Where Applicable)

Depending on your location, we process personal data under one or more legal bases: contract performance, legitimate interests, consent (where required), and legal obligation.

5. How We Share Information

We do not sell personal information. We may share data with infrastructure and hosting providers, email/notification providers, authentication/SSO providers, analytics/logging/security providers, users in your organization/team based on permissions, and legal authorities where required by law.

6. Data Retention

We retain information for as long as needed to provide the Service, maintain security and audit records, and comply with legal and contractual obligations.

7. Security

We use reasonable technical and organizational safeguards, including access controls, encryption in transit (TLS), credential handling controls, and audit logging/monitoring. No method of transmission or storage is 100% secure.

8. International Transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict/object, and request portability of your data, and to withdraw consent where applicable.

10. Children’s Privacy

The Service is not directed to children under 13 (or equivalent age in your jurisdiction), and we do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will post the revised version with a new Effective Date.

12. Contact

Norrab Software LLC
Email: [email protected]
Website: runbookassembly.com