Privacy Policy
Last updated: February 2026
1. Information We Collect
1.1 Information You Provide
- Account registration details (name, company, email address)
- Payment information processed through Stripe (we do not store card numbers)
- Communications you send to us (support emails, feedback)
1.2 Information Collected Automatically
- API usage data (endpoints called, timestamps, credit consumption)
- Technical data (IP address, user agent, request headers)
- Device and browser information for bot protection (via Cloudflare Turnstile)
1.3 Information from Third Parties
- Bot verification results from Cloudflare Turnstile
- Payment status and subscription data from Stripe
2. How We Use Your Information
- Provision and maintain your API access
- Process payments and manage subscriptions
- Enforce rate limits and prevent abuse
- Send transactional emails (key issuance, billing, security alerts)
- Improve service reliability and performance
- Comply with legal obligations
- Respond to support requests
3. Third-Party Service Providers
- Heroku — Cloud hosting (United States)
- Sentry — Error monitoring and diagnostics
- Stripe — Payment processing
- Cloudflare — Bot protection (Turnstile) and CDN
4. Disclosure of Information
We may disclose your information in the following circumstances:
- To service providers who assist in operating our platform
- To comply with legal obligations, court orders, or government requests
- To protect our rights, safety, or property
- In connection with a merger, acquisition, or asset sale
- With your explicit consent
5. Sale of Personal Data
We do not sell, rent, or trade your personal information to third parties.
6. Cookies and Tracking
- We use minimal cookies for session management only
- UTM parameters may be stored locally for attribution purposes
- Session cookies are used for authentication
- We do not use advertising pixels or third-party tracking cookies
7. Data Retention
We retain account data for the duration of your account plus 90 days after deletion. API usage logs are retained for 12 months. Payment records are retained as required by law.
8. Children’s Privacy
Our service is not directed at individuals under the age of 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly.
9. International Users
Our services are hosted in the United States. By using our service, you consent to the transfer and processing of your data in the United States. We do not guarantee compliance with data protection laws outside of the United States.
10. Your Rights
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request data portability
To exercise these rights, contact us at hello@runsales.ai.
11. Security Measures
- All data transmitted via TLS/HTTPS
- API keys are hashed at rest
- Access controls and role-based permissions for internal systems
- Automated monitoring for unauthorized access
12. Do Not Track Signals
Our service does not currently respond to Do Not Track browser signals.
13. Changes to This Policy
We may update this policy from time to time. Continued use of the service after changes constitutes acceptance of the revised policy.
14. Contact Information
Wasatch Crest Holdings LLC
Email: hello@runsales.ai
Web: regdatalab.com