Home / Legal / Privacy
Privacy Policy
What we collect, why we collect it, and the controls you have. We test AI for leaks for a living, so we try hard not to be one.
01Who we are
Raunsten Labs (“Raunsten”, “we”) provides a platform for testing and monitoring applications built on large language models. This policy explains how we handle personal data when you visit our website, contact us, apply for a job or use our service.
02What we collect
- Contact details you give us through forms, such as name, work email, company and your message.
- Account information, such as login details, workspace settings, billing contact and payment records handled by our payment processor.
- Usage data about how the platform is used, such as pages visited, features used, errors and approximate location derived from IP address.
- Job applications, including the information and links you choose to send.
- Customer Data processed during assays and monitoring, described separately below.
03How we use it
We use personal data to provide and secure the service, respond to enquiries, process payments, evaluate job applications, improve the product and meet legal obligations. Where the law requires a legal basis, we rely on performance of a contract, our legitimate interests in running and improving the business, your consent where we ask for it, and compliance with legal obligations.
We do not sell personal data and we do not use it for third-party advertising.
04Customer Data
When customers run assays or enable production monitoring, prompts and responses from their applications may contain personal data. For this data, the customer is the controller and Raunsten acts as a processor, handling it only on the customer’s instructions and under our Data Processing Addendum.
- Customer Data is never used to train models offered to other customers.
- Customers can enable automatic redaction of common personal data fields before storage.
- Enterprise customers can keep all Customer Data inside their own cloud environment.
06Retention
We keep personal data only as long as needed for the purposes above. Assay data follows the retention period of your plan, from 14 days to custom periods for enterprise customers. Contact form submissions are kept for up to 24 months, and job applications for up to 12 months unless you ask us to delete them sooner.
07Security
Data is encrypted in transit and at rest. Access to production systems is limited to staff who need it, protected by single sign-on and hardware keys, and logged. We test our own platform with the same adversarial methods we offer to customers. If you believe you have found a vulnerability, please write to security@raunsten.com.
08Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can also lodge a complaint with your local data protection authority. To exercise these rights, contact us using the details below. We respond within 30 days.
If your data was sent to us by one of our customers as Customer Data, we will forward your request to that customer.
10Contact
For any privacy question or request, write to privacy@raunsten.com. We will update this policy when our practices change and show the date of the latest version at the top of this page.