Workspaces are isolated
Workspace membership and permissions control signed-in access to shared company records and files.
Security
Security for operational process data
Runova stores guides, process steps and screenshots from the systems your team uses. Access is separated by workspace and controlled by role.
Google Cloud infrastructure
Cloud records and files are stored in me-central1 (Doha, Qatar). Backend services run in Doha and Iowa, United States. Google Cloud encrypts stored data at rest, and HTTPS protects data in transit. The extension encrypts its saved recordings and guide cache on the device. Most company records also use a separate company key; older recorded guides and uploaded company files are still being moved to that protection.
Google sign-in
Authentication runs through Google. Runova does not receive or store Google passwords.
What the extension captures
It does
- Activate only during a recording or playback you start
- Capture the clicks in that recording, with each page's address, title and nearby labels
- Send the result to your workspace alone
It does not
- Observe browsing outside an active recording
- Store passwords or values typed into form fields
- Sell your recordings or collect your browsing history
Screenshots are images of your screen. Where a page displays real customer data, avoid recording it or mask the values first.
Access inside your company
A workspace has an owner, admins and members. What each person can create, edit, assign or delete follows from their role and permissions, checked on the server as well as in the interface.
Access inside Runova
Workspace permissions restrict access inside the product. Authorized Runova backend services and cloud administrators can still access readable data; this is not customer-only end-to-end encryption. Human access is limited by our support, acceptable-use and legal policies. Our service providers are listed on the providers page.
Uploaded files
Runova accepts only common document, picture and video files, each with a size limit: PDF, Word (.docx), Excel (.xlsx), plain text, Markdown, and PNG and JPEG pictures; guide screenshots and projects also accept WebP pictures, and projects accept MP4, MOV and WebM videos. Since 30 September 2026, Runova reads every new Word, Excel and text file in full, and every PDF except password-protected ones, and refuses it when it finds macros, embedded programs or objects, links that make Office fetch content when the file opens, or scripts or attached files inside a PDF. Runova does not scan uploaded files for viruses. Open files only from people you trust, and keep your own devices protected.
Deletion and export
Deleting a guide removes it and its screenshots; deleting a workspace removes its content. You can delete your own account in Account settings after a recent sign-in. The workspace owner can download the workspace’s processes, guides and other records, with a list of its uploaded files, from Workspace settings at any time. Copies of the uploaded files and screenshots themselves are sent on request; email us. Deleted data stays in encrypted backups for up to 98 days before they expire.
Certification
Runova does not hold a SOC 2 report or ISO 27001 certificate, and does not claim to. If your organisation requires formal certification before engaging a supplier, ask and you will get a direct answer on where that stands.
Reporting a vulnerability
Email pilot@runova.ae with enough detail to reproduce the issue.