Privacy Policy

Effective Date: March 25, 2026

1. Introduction

1581307 B.C. LTD., operating as RunMyBiz ("we," "us," or "our"), respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the RunMyBiz platform, website, and all related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you register for an account, subscribe to a plan, or interact with the Service:

  • Account Information: Name, email address, password, company name, and billing address.
  • Payment Information: Credit card details, billing address, and transaction history. Payment processing is handled by Stripe, and we do not store your full credit card number on our servers.
  • Business Data: Any business information, documents, files, prompts, or instructions you submit to the Service for processing by our AI agents.
  • Communications: Any messages, support requests, feedback, or correspondence you send to us.

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical and usage data:

  • Device and Browser Information: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Usage Data: Pages visited, features used, task types submitted, session duration, click patterns, and interaction logs.
  • Log Data: Server logs, error reports, timestamps, and referring URLs.
  • Cookies and Similar Technologies: We use cookies, local storage, and tracking pixels to maintain sessions, remember preferences, and analyze usage. See Section 9 for details.

2.3 Information from Third Parties

We may receive information about you from third parties, including authentication providers (such as Google or GitHub if you use social login), analytics services, and payment processors.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To create and manage your account, process your tasks through AI agents, deliver outputs, and provide customer support.
  • AI Processing: Your prompts, business data, and instructions are sent to third-party AI model providers (including but not limited to Anthropic, OpenAI, and other providers) to generate outputs. We select the best provider for each task. Your data is processed in accordance with each provider's data handling policies.
  • Billing and Payments: To process subscriptions, track credit usage, issue invoices, and handle refunds.
  • Product Improvement: To analyze usage patterns, diagnose technical issues, and improve the Service's features and performance.
  • Communications: To send you transactional emails (account confirmations, billing receipts, security alerts), product updates, and, with your consent, marketing communications.
  • Security and Fraud Prevention: To detect, prevent, and respond to security incidents, fraud, abuse, and violations of our Terms of Service.
  • Legal Compliance: To comply with applicable laws, legal processes, and regulatory requirements.

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

  • AI Model Providers: Your prompts and business data are transmitted to third-party AI providers to process tasks. These providers are contractually obligated to handle data in accordance with their privacy and security commitments.
  • Payment Processors: We share billing information with Stripe to process payments securely.
  • Infrastructure Providers: We use cloud hosting and infrastructure services (such as Vercel, AWS, or similar) that may process or store data on our behalf.
  • Analytics Providers: We may share anonymized or aggregated usage data with analytics services to help us understand how the Service is used.
  • Legal Obligations: We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity.
  • With Your Consent: We may share your information with other parties when you have given us explicit consent to do so.

5. Meta Advertising Integration

RunMyBiz offers an optional service that creates and manages advertising campaigns on Meta-owned platforms (Facebook, Instagram, Audience Network) on your behalf. To deliver this service, ad campaigns are operated on Meta's Business Manager and ad accounts owned by 1551270 B.C. LTD. (operating under the brand "Toriva"), an affiliated company under shared ownership with 1581307 B.C. LTD. (RunMyBiz). This separation exists solely for operational and compliance reasons; both companies are bound by this Privacy Policy with respect to data they receive from you.

The data sent to Meta to deliver this service is limited to:

  • The advertising content (ad copy, images, video) you have approved for publication.
  • Audience targeting parameters you have selected (geographic region, age range, interest categories).
  • Your business name as the advertiser of record.
  • Your selected daily and total budget.

The data NOT sent to Meta includes: your RunMyBiz login credentials, your full conversation history with the RunMyBiz AI assistant, your billing information, and any business operations data unrelated to the specific ad you have authorized.

Meta's handling of the data it receives is governed by Meta's Privacy Policy. You can request deletion of any ad-campaign data we hold by following the process on our Data Deletion page.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

  • Account Data: Retained for the duration of your account and for up to 12 months after account deletion, unless a longer retention period is required by law.
  • Task and Output Data: Prompts, inputs, and generated outputs are retained for up to 90 days to support troubleshooting, dispute resolution, and service continuity. You may request earlier deletion.
  • Billing Records: Retained for up to 7 years as required by Canadian tax and financial regulations.
  • Log and Analytics Data: Retained for up to 24 months in aggregated or anonymized form.

When data is no longer needed, we delete or anonymize it using commercially reasonable methods.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Access controls limiting data access to authorized personnel on a need-to-know basis.
  • Regular security assessments and monitoring.
  • Secure handling of API keys and credentials.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Your Rights and Choices

8.1 All Users

Regardless of your location, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the link in any marketing email or by contacting us.
  • Data Export: Request a machine-readable export of your personal data.

8.2 Rights for EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation:

  • Legal Basis for Processing: We process your data based on: (a) performance of a contract (to deliver the Service), (b) legitimate interests (to improve the Service and prevent fraud), (c) your consent (for marketing communications), and (d) legal obligations.
  • Right to Restrict Processing: You may request that we limit processing of your data in certain circumstances.
  • Right to Object: You may object to processing based on legitimate interests.
  • Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You may file a complaint with your local supervisory authority.

To exercise any of these rights, contact us at jeff@toriva.ai. We will respond within 30 days (or as required by applicable law).

8.3 Rights for Canadian Residents (PIPEDA)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access, correct, and challenge compliance with respect to your personal information. You may also withdraw consent for certain data processing, subject to legal or contractual restrictions.

8.4 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • The right to know what personal information is collected, used, shared, or sold.
  • The right to delete personal information held by us.
  • The right to opt out of the sale or sharing of personal information. We do not sell personal information.
  • The right to non-discrimination for exercising your privacy rights.

9. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

  • Essential Cookies: Required for the Service to function (session management, authentication). Cannot be disabled.
  • Analytics Cookies: Help us understand how users interact with the Service (e.g., page views, feature usage). You may opt out.
  • Preference Cookies: Store your settings and preferences for a better experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect functionality.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including Canada, the United States, and other jurisdictions where our service providers operate. When we transfer data internationally, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Data processing agreements with all third-party processors.
  • Assessment of the data protection laws in recipient countries.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If we learn that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us at jeff@toriva.ai.

12. Third-Party Links and Services

The Service may contain links to third-party websites, services, or integrations that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on the Service with a revised effective date, and where required, by sending you an email notification. Your continued use of the Service after such changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

1581307 B.C. LTD.
Operating as RunMyBiz
Email: jeff@toriva.ai

For GDPR-related inquiries, you may also contact our designated data protection point of contact at the email address above.