Privacy policy

Last updated 18 September 2026

This policy covers Runbi, the staff app and website at runbi.autosterea.com, made by Autosterea ("we"). Runbi is used by salons, spas and studios to run their bookings. It is a workplace tool: a business creates accounts for its own owners and staff.

What we collect

• Your account. Your name, email address and role in your business, and your password, which is stored only as a one-way hash. A photo link if you add one.
• Signing in. A cookie that keeps you signed in, and one that remembers your calendar view on this device. Both are used only by the app, and for nothing else.
• Business records. The appointments, client details (such as names, phone numbers, email addresses, visit history and notes), payment records and reviews that your business keeps in Runbi. These belong to the business. We store and process them on the business's behalf, only to provide the service.

What we do not do

• We do not show advertising.
• We do not sell personal information.
• We do not track you across other companies' apps or websites.
• The app contains no analytics or tracking tools.

Services we use

Each of these receives only what it needs to do its job:

• DigitalOcean hosts Runbi, on servers in San Francisco, USA.
• Twilio SendGrid delivers email, such as booking confirmations and sign-in links.
• LeadConnector delivers text messages, only for businesses that switch text messages on.
• Google serves the fonts the app's pages use, and supplies a business's Google reviews if the business connects its Google Business Profile.

How long we keep it

Account details are kept while your account is active. Business records are kept for as long as the business uses Runbi, or as the business directs us.

Deleting your account

In the app, open the menu, tap Edit profile, then Delete account. This sends a deletion request to the owner of your workspace, who can delete the account straight away; if nobody does, it is deleted automatically 30 days after your request. Deleting erases your name, email address, password and sign-in, and you can no longer sign in. Appointment and payment records that belong to the business stay with the business. You can also ask us directly at the address below.

Security

Runbi is served only over encrypted connections. Passwords are hashed, and each business's data is kept separate from every other business's.

Children

Runbi is a workplace tool and is not directed at children.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

Questions about privacy, or a request about your data: email ravi@autosterea.com.