Privacy

Who we are

Runs It All is operated by [Legal entity name], [registered address], [company number] (“we”). We provide a WhatsApp assistant to businesses (“the business”) that answers, books and follows up with their customers.

For a customer messaging a business on WhatsApp, the business is the controller of that conversation and we process it on the business’s behalf. For a business owner’s account, we are the controller.

What we process

• Business accounts: name, email, business details, the WhatsApp number connected to the service, billing status.
• Customer conversations: the WhatsApp phone number, the name a customer gives, the messages exchanged with the business (text, voice notes transcribed to text, images and documents sent), and the bookings, orders and follow-ups that result.
• Service records: appointments, reminders sent, attendance confirmations, review requests, follow-ups, and whether each automated message was delivered.
• Usage: how many replies the AI model wrote, for billing.

Why, and on what basis

• To run the service the business asked for: answering its customers, keeping its calendar, sending reminders and follow-ups (performance of the contract with the business).
• Automated messages to a customer are sent only after the customer has opted in, and stop immediately when a customer replies STOP or asks not to be contacted (consent, and the business’s legitimate interest in serving its customers).
• Billing and security (legal obligation and legitimate interest).

Who else sees it

• Anthropic (AI model provider) receives the content of a conversation when the assistant needs a model to write a reply. Many replies are produced by rules without a model and are not sent to any AI provider.
• WhatsApp (Meta) carries the messages, as with any WhatsApp conversation. Our connection to WhatsApp runs on servers we operate; messages are not routed through a third-party messaging platform.
• Stripe processes payments for business subscriptions. Stripe does not receive customers’ conversations.
• Resend delivers account emails to business owners.
• Our error-monitoring tool receives technical error details, configured to exclude message content and personal data.
• Supabase hosts our database. Hetzner hosts our servers.

We do not sell personal data and do not use customer conversations to train AI models.

How long we keep it

• Conversations: up to two years from the message.
• Bookings and orders: up to seven years, as business records.
• Usage and billing records: up to three years.

Your rights

If you are a customer of a business using Runs It All, contact that business first; it can access, correct, export or erase your data through its account, and we help it do so. Erasure anonymises your phone number and name and removes your message content while the business keeps its booking statistics.

If you are a business owner, you can export your customers’ data and close your account from your settings. You can also write to us at info@runsitall.com. You have the right to complain to your data protection authority.

Security

Data is encrypted in transit. Each business’s data is separated from every other business’s at the database level. Access to production systems is limited to the people who operate them.

Changes and contact

We will post changes here with a new date. Questions: info@runsitall.com.