PRIVACY / LAST UPDATED 13 SEPTEMBER 2026

What we know about you.

Runthrough is run by Beyond Tomorrow Studios Ltd, a company registered in England and Wales (company number 15055704) at 8 Delta Mews, London, NW7 1RA. We are the data controller for the information described here. This policy is written to be read, not to be survived; if anything in it is unclear, ask us and we will explain it.

What we collect

When you have an account

• Who you are. Your name, email address, and anything else you choose to put in your profile or your brand kit.
• What you make. The pitches you build: text, images, video, audio, settings, and the drafts along the way.
• Who you work with. The email addresses of people you invite to a workspace or send a pitch to, and any note you write them.
• What you pay. Your plan, your billing history and your billing contact. Card details go straight to Stripe and never reach our servers.
• How you use it. Sign-in times, the pages you open in the app, and technical logs including your IP address and browser.

When you open a pitch someone sent you

This is the part worth reading twice, because it is the point of the product. When a pitch link is opened, we record that it was opened, when, for how long, how far through it got, and the approximate location and device derived from the IP address. We pass that back to the person who sent it, so they can tell whether their idea landed. If they sent the link to a named recipient, the record is tied to that name.

If you have been sent a pitch and would rather not be counted, tell the sender, or write to us and we will remove the record.

When you visit this website

Almost nothing. This marketing site sets no cookies, runs no analytics and loads no trackers. Our host keeps standard server logs, which include IP addresses, for security and troubleshooting. We load one web font from Google Fonts, which means Google’s servers see the request.

Why we are allowed to hold it

• To give you what you signed up for — running your account, hosting your pitches, sending your links. That is performance of our contract with you.
• Because we have a legitimate interest in keeping the service secure, preventing abuse, understanding which parts of the product get used, and telling customers about changes that affect them.
• Because the law requires it — tax and accounting records, mainly.
• Because you said yes — for anything else, such as marketing email to someone who is not a customer. You can withdraw that at any time, and every email we send has an unsubscribe link.

Who else touches it

We do not sell your data and we do not share it for advertising. We use a small number of suppliers to run the service, each of them bound to handle it only on our instructions:

• Supabase — the database and sign-in, where your account and pitches live.
• Netlify — hosting for the app, this site and published pitch links.
• Stripe — subscriptions and card payments.
• Resend — the emails the product sends, such as invitations and read notifications.
• Cloudflare — domain, DNS and email routing.

Some of these process data outside the UK. Where they do, the transfer is covered by the UK International Data Transfer Addendum, the UK extension to the EU Standard Contractual Clauses, or an adequacy decision.

We would also hand information over if we were legally required to, and we would pass it on to a buyer if the business were ever sold — in which case this policy would follow it.

How long we keep it

• Your account and your pitches — for as long as your account is open, and for 30 days after you close it, so that a mistake can be undone.
• Viewer records on a pitch — for as long as the pitch exists, unless the sender or the viewer asks us to clear them.
• Billing records — six years, because HMRC says so.
• Server and security logs — up to 12 months.

Keeping it safe

Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it and protected by multi-factor authentication. Pitch links can be given a password and an expiry date, and we would encourage you to use both for anything sensitive. No system is perfect; if there were ever a breach that put you at risk, we would tell you and the ICO within the time the law allows.

What you can ask for

Under UK data protection law you can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, restrict what we do with it, or stop a particular use altogether. Where we rely on legitimate interests you can object, and where we rely on consent you can withdraw it.

Write to contact@runthrough.studio or contact@runthrough.studio. We will answer within one month. There is no charge.

If we get it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first.

Children

Runthrough is a tool for working professionals and is not intended for anyone under 18. We do not knowingly collect data about children.

If this changes

We will update this page and change the date at the top. If a change materially affects you, we will email you about it rather than hoping you notice.