Security

PR Run, a company organized and existing under the laws of the State of Montana, applies reasonable administrative, technical, and organizational safeguards intended to reduce risk. No system is invulnerable. This page is an overview of practical controls. It is not a certification.

Encryption in transit

Traffic between clients and PR Run is encrypted using HTTPS (TLS).

Encryption at rest

Data stored through our hosting provider inherits encryption-at-rest capabilities provided by that infrastructure. Application hosting is provided by Vercel, Inc.

Access

Access to production systems is limited to personnel with a need to know. We do not presently operate a multi-tenant product with role-based organization workspaces.

Payments

Paid features are not live. If they are offered, payment information will be processed by a third-party processor (Stripe, Inc. or a successor). PR Run will not store full card numbers.

Email

The public site captures email by a mailto message to hi@pr.run. We collect an address if you choose to write us. We do not presently operate a hosted email service provider for list enrollment.

Your responsibilities

You remain responsible for the accuracy of addresses you give us, for User Content, and for verifying course and race information with the organizer before you rely on it.

Responsible disclosure

If you believe you have found a security vulnerability in the Service, write security@pr.run. Include enough detail for us to reproduce the issue. Do not access data that is not yours, do not degrade the Service, and do not publicly disclose the issue until we have had a reasonable opportunity to investigate and remediate. We will acknowledge reports sent to that address.

Contact

Security: security@pr.run. General questions: hi@pr.run.