Skip to main content

Privacy Policy

Effective Date: October 21, 2026

Netrun Systems, Inc. ("Company", "we", "us"), a C Corporation, operates netrunsystems.com and associated software products. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

This policy covers netrunsystems.com and our other marketing websites. Our hosted platform, Sigil Cloud, has its own privacy policy covering account data and the data your own site visitors generate.

1. Information We Collect

Information you provide: Name, email address, company name, and the contents of any message you send us, when you contact us, request a quote, or create an account. If you buy a subscription, your payment details go directly to Stripe on Stripe's own checkout page and never reach our servers; we receive only an identifier for your customer and subscription records and their status.

Collected automatically by our server: IP address, browser and device type, the page requested, the response code, and the time of the request, in ordinary server logs.

Collected automatically by our own page analytics: our pages run a small first-party script that records which page and page section you viewed, clicks, scroll depth, time in view, the referring page, your browser's user-agent string, and a random session identifier generated fresh on each page load. That script sets no cookies, writes nothing to your device's storage, and does not record your IP address in its analytics records. The session identifier is not persisted, so it does not follow you between pages or between sites.

Cookies: we use a strictly necessary cookie to keep you signed in when you log in to a product account. We do not use advertising or cross-site tracking cookies.

No third-party analytics or advertising. We do not run Google Analytics or any other third-party analytics or advertising service on this website, and no third party collects personal information about your activity across other websites through our pages.

No consent banner. Because our analytics set nothing on your device and we run no third-party trackers, these pages do not present a cookie consent banner, and there is no analytics opt-out. We would rather tell you that plainly than show a banner that does nothing.

2. How We Use Your Information

  • Provide, maintain, and improve our services and websites
  • Process transactions and send information related to them
  • Send administrative notifications (service updates, security and billing notices)
  • Respond to your comments, questions, and support requests
  • Understand which pages and content are useful, using the first-party analytics described above
  • Keep the service secure and investigate abuse

We do not use your information for automated decisions that have a legal or similarly significant effect on you.

3. Information Sharing

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.

We share information with:

  • Service providers who run our infrastructure on our behalf: Amazon Web Services (servers, database, file storage, and email delivery through Amazon SES, all in the United States), Stripe (payment processing, United States), Cloudflare (anti-bot checks at signup and login), and Google Workspace (our own business email, which receives anything you send to a netrunsystems.com address, including privacy requests). These are the only processors that handle personal information for us.
  • Legal obligations, when required by law, regulation, or legal process.
  • Business transfers, in connection with a merger, acquisition, or sale of assets. We will tell you before your data moves.

4. Data Security

We protect information with HTTPS on every public address, passwords stored only as salted scrypt hashes that we cannot reverse, database-level separation between customers using PostgreSQL row-level security, anti-bot checks and rate limits on signup and login, and database backups that are encrypted before they are stored.

We want to be straight about the limits of that, because a vague security claim is worth less than an honest one:

  • We hold no security certifications. We are not SOC 2 audited and not ISO 27001 certified, we have not had a penetration test, and we do not operate a scheduled third-party security assessment programme. If a vendor questionnaire asks, the answer is no.
  • We do not claim blanket "encryption at rest." Our database backups are encrypted before storage. We are not going to make a broader claim we have not verified end to end.
  • No method of transmission or storage is 100% secure.

5. Data Retention

We retain personal information for as long as your account is active or as needed to provide the service you asked for, and afterwards for as long as we need it for billing, tax, and dispute records. If you began a signup and never completed payment, that partial record is deleted 30 days after it was created.

We do not currently operate an automatic deletion schedule for server logs or for the page analytics described in section 1; that data is kept until deletion is requested. You may request deletion at any time using the contact address in section 8.

6. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict how we use it. We honour these requests from anyone who asks, wherever you live, rather than checking first whether a particular law covers you.

Requests are handled by a person, by hand — there is no self-service button. Email the address in section 8 and we will respond within 30 days, telling you before that deadline if a complex request will take longer. We will verify who you are, normally by replying to the address on your account, before we act.

California residents. The categories of personal information we collect are: identifiers (name, email address, IP address), commercial information (your plan, subscription status, and payment history), internet or network activity (pages requested, referrer, user-agent, and the engagement events described in section 1), and the contents of messages you choose to send us. We collect these from you directly and automatically from your use of our websites, for the business purposes listed in section 2, and we disclose them only to the service providers named in section 3.

You have the right to know what we collect, to delete it, to correct it, to opt out of its sale or sharing, and to limit our use of sensitive personal information. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not knowingly collect sensitive personal information, so there is nothing to opt out of or limit — but you may ask us to confirm that. We will not discriminate against you for exercising any of these rights.

Do Not Track. We do not respond to browser Do Not Track signals. The first-party analytics described in section 1 run regardless of a Do Not Track header. We do not permit third parties to collect personal information about your activity across different websites through our pages.

7. Changes to This Policy

We may update this policy as our services change. If a change materially affects your rights or how we use your data, we will notify you by email where we have your address, or by a prominent notice on this website, before it takes effect. The effective date at the top tells you which version you are reading.

8. Contact

For privacy questions and rights requests: daniel@netrunsystems.com

Netrun Systems, Inc. 2325 Maricopa Hwy Ojai, CA 93023 United States