Privacy Policy

Runvy is a customer relationship management (CRM) service that businesses use to manage their sales, customers, team, messages and finances. This policy explains what information Joao Silva LLC (“we”, “us”) handles when businesses and their teams use Runvy, and when people exchange messages with those businesses through it.

1. Who we are and our role

Each business that signs up (a “Customer”) decides what information it puts into Runvy and how it uses it. For that information — for example the Customer's own clients, leads, employees and conversations — the Customer is the controller and we act as its service provider (processor), handling the information only on its instructions and to provide the service. If you are a client of one of these businesses, please contact that business first about your information; we will help them answer you.

For the account information of the people who sign in to Runvy, and for how we run our own website and service, we are the controller.

2. Information we handle

• Account information: name, email address, password (stored only as a secure hash by our authentication provider), business name, time zone, role and permissions, and the date the Terms were accepted.
• Business content entered by Customers: clients and leads (names, phone numbers, emails, addresses, notes), deals, sales, invoices, expenses, inventory, schedules, time-clock entries, employee records and documents.
• Messages: texts (SMS), WhatsApp, Facebook Messenger and Instagram Direct messages, and website chat messages sent to or from a Customer's business through Runvy, with the sender's phone number, Meta-scoped user ID or chat details, the name they show, delivery status and time.
• Connection keys: the access tokens and keys a Customer connects (for example to Twilio or Meta). They are stored encrypted and are only used to send and receive that Customer's messages.
• Technical information: IP address, browser and device type, pages used, and logs needed to keep the service secure and working. We use only essential cookies (to keep you signed in); we do not use advertising cookies or sell information to advertisers.

3. Data from Meta (WhatsApp, Messenger, Instagram)

When a Customer connects its WhatsApp Business account, Facebook Page or Instagram professional account, we receive through Meta's official APIs: the messages people send to that business, their delivery status, the sender's WhatsApp phone number or Page/Instagram-scoped ID and the public name they show, and basic details of the connected account (such as the business phone number, Page name and Instagram username).

• We use this data only to show those conversations to the Customer's team in Runvy, to send the replies they write, and to link the conversation to the right client or deal for that Customer.
• We do not sell it, use it for advertising, share it with other Customers, or use it to build profiles of people across businesses.
• It stays with the Customer that received it. When a Customer disconnects the account, we stop receiving new data and delete the access tokens; when a Customer deletes its account, its messages are deleted as described below.
• Anyone can ask for their data to be deleted — see Data deletion.

4. How we use information

• To provide, maintain and secure Runvy for each Customer, including sending and receiving the messages they ask us to.
• To let people sign in, manage permissions and keep a history of changes (an audit log) for the Customer.
• To provide support, answer questions and tell Customers about important changes to the service.
• To prevent abuse, fraud and spam, and to comply with the law.

We do not use Customer content to train artificial-intelligence models, and we do not sell personal information.

5. Who we share it with

We share information only with service providers that help us run Runvy, under contracts that require them to protect it and use it only for that purpose:

• Supabase (database, sign-in and file storage) and Vercel (hosting);
• Twilio (text messages and phone calls), for Customers who use them;
• Meta Platforms (WhatsApp, Messenger and Instagram), for Customers who connect them;
• a payment processor such as Stripe, if a Customer pays for Runvy online (we never see full card numbers).

We may also disclose information if the law requires it, to protect the rights and safety of people or of the service, or as part of a merger or sale of the business (in which case this policy keeps applying to it).

6. How long we keep it

We keep a Customer's information for as long as its account is active. When a Customer's account is deleted, its records, messages and files are removed from our active systems right away and disappear from backups within 30 days. Some records may be kept longer when the law requires it (for example tax or payment records).

7. Security

Information travels encrypted (HTTPS). Each business's data is kept separate by rules enforced in the database itself, connection keys are encrypted, and access within each business follows the roles and permissions its owner sets. No system is perfectly secure; if we learn of a breach that affects you, we will tell the affected Customers and people as the law requires.

8. Your choices and rights

Depending on where you live (for example in California under the CCPA, or in the European Union under the GDPR), you may have the right to know what information we have about you, to get a copy, to correct it, to delete it, and to object to some uses. To make any request — including a copy of a business's data or its deletion — email us at runvy.support@gmail.com. If your information was entered by a business that uses Runvy, we will pass your request to that business, which decides on it. We will not treat you differently for using these rights.

9. Children

Runvy is a service for businesses and is not meant for children. We do not knowingly collect information from children under 13 (or under 16 where the law sets that age). If you think a child's information was given to us, email us at runvy.support@gmail.com and we will delete it.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we will tell Customers about important changes in Runvy or by email before they take effect.