If Runway Ledger is ever wound down, the following process applies. This is the commitment to users — not a marketing line.
30 days advance notice
All registered users receive an email at least 30 days before the planned shutdown date. The notice covers:
- The exact shutdown date.
- A direct link to download a full personal data export.
- Confirmation that no further charges will be made on subscriptions.
- A pointer to this document.
The same notice goes up on the marketing site home page and in the in-app banner.
Automatic data export
Within the 30-day window, every user is automatically emailed a personal export of their data — even if they never log in during the window. The export is a JSON file containing:
- All cost entries with full metadata.
- All revenue entries with full metadata.
- All budgets.
- Account profile (email, settings).
No special action required from the user.
Subscriptions cancelled, no further charges
- All Stripe subscriptions are cancelled at the start of the wind-down window (i.e. on the day of the shutdown announcement).
- No renewals are processed during the window.
- Prorated refunds for the unused portion of any active billing period are issued within 14 days of the announcement.
- Users on annual plans receive prorated refunds based on remaining months.
Read-only window
For the 30 days between announcement and shutdown:
- The app remains fully accessible.
- All data viewing and exporting continues to work.
- New entries / mutations are disabled — the app becomes read-only on the announcement date.
- The export endpoint stays available and unrestricted.
Final purge
After the 30-day window expires:
- The Railway service is taken offline.
- The Postgres database is dropped and the volume destroyed.
- All Stripe customer records are deleted (subject to Stripe’s own retention policy for legal/tax compliance).
- All Resend / Sentry / monitoring data is deleted.
- The marketing site is taken down.
Backups created during the live period (Railway daily snapshots, 7-day retention) age out naturally within the week following purge.
What survives the purge
Nothing personal. Aggregate / anonymised analytics (if collected) may be retained for post-mortem, but never tied to specific users.
Refund disputes
If you believe a refund was incorrect, email hello@runwayledger.app within 30 days of the refund date. We commit to a written response within 5 business days.