Privacy Policy

At Runna Media, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Client Portal.

1. Information We Collect

1.1 Information You Provide

When you use our Portal, you may provide us with:

• Account Information: Name, email address, company name, phone number
• Project Information: Project requests, descriptions, requirements, and feedback
• Support Communications: Messages, tickets, and other correspondence
• Payment Information: Billing details processed through QuickBooks

1.2 Information Collected Automatically

When you access the Portal, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, timestamps
• Log Data: IP address, access times, referring URLs

1.3 Information from Third Parties

We may receive information from:

• Google: If you sign in with Google, we receive your name and email address
• QuickBooks: Invoice and payment status information

2. How We Use Your Information

We use the collected information to:

3. Third-Party Services

We use the following third-party services to operate the Portal:

3.1 Supabase (Authentication & Database)

We use Supabase to securely store your account information and authenticate your login. Supabase is SOC 2 Type II compliant and uses encryption at rest and in transit.

Privacy Policy: supabase.com/privacy

3.2 QuickBooks (Invoicing)

We integrate with QuickBooks to manage invoices and payments. When connected, QuickBooks may access your company name and invoice data.

Privacy Policy: intuit.com/privacy

3.3 Google (Authentication & File Storage)

We use Google for optional sign-in and Google Drive for delivering project files. Google may collect data according to their privacy policy.

Privacy Policy: policies.google.com/privacy

3.4 Netlify (Hosting)

Our Portal is hosted on Netlify, which may collect server logs and analytics data.

Privacy Policy: netlify.com/privacy

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share your information only in these circumstances:

• Service Providers: With third-party vendors who help us operate the Portal (as listed above)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with password hashing
• Regular security audits and updates
• Access controls limiting who can view your data
• Invite-only registration to prevent unauthorized access

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as:

• Your account is active
• Necessary to provide our services
• Required for legal, accounting, or tax purposes

After account deletion, we may retain certain information for up to 7 years to comply with legal and financial reporting requirements.

7. Your Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format.

7.2 Correction

You can update your account information through the Portal settings or by contacting us.

7.3 Deletion

You can request deletion of your account and personal data, subject to our legal retention requirements.

7.4 Opt-Out

You can opt out of non-essential communications by contacting us or adjusting your notification settings.

7.5 California Residents (CCPA)

California residents have additional rights including the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information (note: we do not sell personal information).

8. Cookies and Tracking

The Portal uses essential cookies for:

• Authentication and session management
• Security and fraud prevention
• Remembering your preferences

We do not use advertising or third-party tracking cookies.

9. Children's Privacy

The Portal is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes