Privacy Policy

Run N Gun Studios is a video production studio. The legal entity behind the portal and our contracts is Run N Gun LLC, doing business as Run N Gun Studios.

Address: 1522 Gordon Street, Hollywood, California.

Contact: workwith@runngun.us

Websites: www.runngun.studio (our site) and www.rngportals.com (the client portal, “the portal”). This policy covers both.

• Your name, company, email, and phone number
• Project details: the job, the dates, the notes, the brief
• Files and footage you send us or we make for you. Working files live in Cloudflare R2. The raws, when they are large, live on Google Drive.
• Messages sent inside the portal
• Call transcripts, when a call is recorded through Fathom. We only record with consent.
• Signed agreements (through RabbitSign)
• Invoices and payment status. Card payments run through Stripe. The portal itself never stores your card number.
• If you work with us as crew or a contractor: your rate and your payout details
• Usage logs: basic records of activity in the portal, kept for security and troubleshooting

We do not collect more than we need to run the job and the business around it.

We collect this to quote, book, run, and get paid for the work you hire us for, to pay the people who work on it, to keep our books, and to keep the portal secure. Where the law requires a stated basis: we process your information to perform our contract with you, to meet our legal obligations (tax and payment records), and, in a few limited cases, because we have a legitimate business reason, like keeping usage logs for security.

If you are a California resident, you have the right to:

• Know what personal information we hold about you and where it came from
• Delete it, with the exceptions the law allows (for example, records we are required to keep for tax purposes)
• Correct it if it is wrong
• Opt out of the sale or sharing of your personal information

We do not sell personal information. We do not share it for cross context advertising. There is nothing to opt out of on that front, but you still have the right to ask.

We honor these rights for everyone, since it is the right way to treat client and contractor data.

We use these outside companies to run the portal and the business. Each one only gets the data it needs to do its job:

• Render: hosts the portal’s backend and database
• Vercel: hosts the portal’s frontend
• Cloudflare R2: stores project files
• Stripe: processes card payments
• RabbitSign: handles e-signatures on agreements
• Google (Gmail, Drive, and Calendar where connected): email, large file storage, scheduling
• OpenAI: powers the assistant inside the portal that helps us write messages and documents
• Fathom: records and transcribes calls, with consent

Each of these companies’ own data processing terms cover the kind of contract and payment data we send them.

The portal has an assistant built on OpenAI that helps us write messages, briefs, and other documents. It sees the project context needed to write something useful, like the job details and prior messages on that project. It writes a first pass. It does not send anything on its own. A person on our team reads and checks every message before it goes out to you.

Signing in with Google and connecting Google Calendar are both optional. Here is exactly what the portal asks Google for, and what it does with it.

• Sign in with Google: your Google email address and the fact that Google confirmed it. We use it only to match you to the account Run N Gun invited. We never make a new account from it.
• Google Calendar, when a client or a crew member connects it: Run N Gun shares our RNG calendars for your jobs with your Google address (see the next point), and the portal can add your own job dates (your shoots, cuts due and calls with us) to your own calendar and keep them current. For that it asks for one permission, to add and change events. It never reads your calendar, your other events or your busy times. Disconnecting takes every date it added off your calendar.
• Google Calendar, when the Run N Gun owners connect it: the portal reads the details of the events on the owner’s own Google calendar (the title, the day and the time) and shows them on that owner’s portal calendar, and on the owners’ shared view. Only the owners ever see them. Clients and crew never do. It also reads busy times so a call is only offered when the owner is free. In the owner’s own Google it makes four calendars of its own, RNG Calls, RNG Shoots, RNG Deadlines and RNG To-dos, writes the owner’s dates there (never on the main calendar), and reads back a change made to one of them so the portal and Google stay the same.
• Our shared calendars: Run N Gun keeps RNG calendars on our own Google account, four per client (overall, calls, deadlines, content rollout) and one per job for the crew on it. The portal creates, updates and removes events on those calendars only, shares each one with the people it belongs to (the client, the people the client chooses, the crew on that job and both owners), and reads back a change someone makes to an event on them, like a moved date, so the portal and Google stay the same. A change to money, a contract date or a held shoot day is never made by that alone: an owner confirms it first. Google tells our server when one of these calendars changed, and the portal reads only the calendars it made. Someone with no Google account can get a private link that adds the same dates to any calendar app. It shows only their dates and stops when they are taken off.
• Run N Gun staff accounts may also let the portal export a deck to Google Slides, save those files to Drive, and read our own lead sheet. That covers only files the portal made or our own sheet.

Google data is stored encrypted, used only to run these features for you, and never sold, used for advertising, or used to train AI models. People never read it, except with your permission, for security, or where the law requires. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar any time from the Calendar page, which takes the dates the portal added off your calendar and deletes the saved connection right away, or remove the portal’s access at myaccount.google.com/permissions. To have anything else deleted, write to workwith@runngun.us.

The portal sets an authentication token and your role so it knows you are signed in, and a couple of appearance preferences (your chosen look, reduced motion). These sit in your browser’s local storage, not a tracking cookie, and they are strictly necessary for the portal to work. If you sign in with Google, Google’s own sign in script runs briefly on that page. On the pay screen, Stripe’s own script runs to take your card details directly, so we never see or store them.

We do not run advertising or analytics trackers. Nothing here is used to follow you around the web. Because every cookie and local storage item on the portal is strictly necessary or run by a payment or sign in provider you chose to use, no cookie consent banner is shown.

• Signed agreements, invoices, and receipts: kept, as long as the law requires us to keep them for tax and accounting purposes. These are never cleared automatically.
• Project files and the raws: once your project is fully closed (its final state, with everything invoiced paid or closed out) and there has been no activity on it, no messages, no new files, no invoice activity, for 3 months, its working files (the raws, cuts, uploads, and previews) clear out of Cloudflare R2 automatically. Before that happens, our team gets a 14 day notice listing exactly what would clear, with the chance to keep any of it. A project marked keep, or a file marked keep, is never cleared. This never runs on a project that is still open.
• Call transcripts: kept with the project record, same handling as other project data
• Usage logs: kept for a limited time for security, then cleared

We limit who sees what inside the portal by role. Clients never see who our crew is. Crew members only see their own jobs. Contractor pay rates are restricted to the owners and are not exposed to clients. Card numbers are never stored in our database, Stripe handles that. We keep working to close gaps as we find them, and we treat any leak of contractor rate data as a serious bug, not a minor one.

Some finished work may be shown publicly on our site, as a showcase of what we do. Public work only shows while the switch in your Settings is on. For a new client it starts on, the same as your agreement says (we may show the work after the drop unless you opt out in writing). A client who was here before keeps the setting they already had. You can turn it off any time and it comes down.

The portal and our services are not directed to anyone under 16, and we do not knowingly collect personal information from anyone under 16. If we learn that we have, we will delete it.

Our processors are based in the United States, and your information may be processed and stored there even if you are located elsewhere.

If you have a portal account, go to Settings and use “Request my data be deleted.” It tells an owner, who anonymizes your profile and redacts your messages by hand. Agreements, invoices, and receipts are kept as legal records, they are never part of this.

You can also email workwith@runngun.us and tell us what you want: a copy of what we hold, a correction, or deletion. We will respond and handle it by hand.

If we change this policy, we will update the date at the top and post the new version here. We will not make a material change to how we handle your data without giving you a way to see it first.