Privacy by operating boundary

Scope of this initial policy

This policy describes the OmniRunner.AI v0.1 repository and credential-free demo. It is not a representation that production authentication, provider connections, advertising delivery, or external customer accounts are live.

Demo and console data

The repository contains a sanitized, read-only United.Media portfolio bundle generated from local snapshots. It excludes credential, contact, private-token, provider account, and clone/SSH URL material. The demo does not accept control-plane writes.

Advertising privacy constitution

• No cross-site or stable visitor identifier.
• No behavioral profiles, retargeting cookies, or geo-IP targeting.
• No storage of raw IP addresses or user-agent strings in delivery records.
• Contextual fields are limited to publisher, placement, page type, channel, and topics.
• Delivery measurement is designed for aggregate time buckets.

Production configuration

Before production use, the operator must configure a deployment-specific privacy notice identifying the responsible organization, support route, subprocessors, retention periods, hosting region, authentication provider, and applicable rights. Those facts are intentionally not invented here.

Contact

No public privacy contact is configured in v0.1. The deployment owner must add a verified contact channel before enabling external accounts or OAuth.