Privacy policy

Last updated 7 November 2026

This policy explains what personal information RunSheet ("we") collects when you use runsheet.io, why we collect it, and what you can do about it. We handle personal information under the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Your account: your name, email address and password (stored only as a one-way hash). If you turn on two-factor authentication or passkeys, we store what is needed to check them.
• Your team: the team name, who its members and invitees are, and their roles. Invitations store the invitee's email address.
• Your run sheets: everything you put in them, such as titles, dates, venues, segments, presenters, locations, notes, cues and crew roles, and the view links you create.
• Branding: on Pro, the accent colour and logo you upload.
• Billing: Stripe takes your card details at checkout. We never see or store your card number. We keep your Stripe customer ID, the brand and last four digits of the card on file, your plan, and your subscription and trial dates. We give Stripe your team's name and the team owner's email address, which Stripe uses for receipts and billing notices.
• Technical information: your IP address and browser details in server logs, and to limit how often sign-in, sign-up, password reset and view links can be used.

People who open a view link do not need an account and we do not ask them for anything. We process their IP address only in server logs and to limit how often the link can be loaded.

Why we collect it

• To run the service: sign you in, show your run sheets to your team and crew, and keep every device up to date.
• To bill your team's subscription and send receipts.
• To send emails you need: email verification, password resets, team invitations and billing notices. We don't send marketing email.
• To keep the service secure and fix problems.

Cookies

We use only the cookies needed to keep you signed in and to protect forms from forgery. We don't use advertising or analytics cookies, and we don't sell or share your information for advertising.

Who we share it with

We use these service providers, and only give each one what it needs:

• Hosting: our service is EU-hosted.
• Stripe for payments.
• Postmark to deliver email.
• PostHog: anonymous, cookieless usage analytics, so we can see which pages people use. PostHog is EU-hosted and sets no cookies.

Each of these providers may handle your information outside Australia. We choose providers that protect it to a standard comparable to the Australian Privacy Principles. We may also disclose information where the law requires it.

How long we keep it

We keep your information while your account is open. When you delete your account, we delete your profile and any team you own that has no other members, including its run sheets, view links and logo. Deleting a team deletes its run sheets, view links and logo. Server logs are kept for a short period for security. Stripe keeps billing records for as long as tax and financial laws require.

Your choices

• You can view and correct your name and email address in your profile settings, and delete your account from there.
• You can ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@runsheet.io.

Complaints

If you have a concern about how we handle your information, email hello@runsheet.io and we'll respond within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll email account holders before it takes effect.