Runna
Privacy Policy

Runna Privacy Policy

This policy explains what information Runna collects, why we collect it, how we protect it, and how users can control or delete it.

Last updated: May 4, 2026

1. Scope and who we are

Runna is a WhatsApp-first smart deal-finding, bidding intelligence, marketplace search, and price-intelligence platform. Runna is a SaaS product and customer-facing brand owned and operated by BuildSavanna, the legal entity responsible for the Runna service. In this policy, Runna refers to the product/service, and BuildSavanna, we, us, and our refer to the company operating the service.

This policy applies to the public website, web dashboards, WhatsApp interactions, account features, support channels, and any Google, Meta, Facebook, Instagram, WhatsApp Business, or other third-party integrations that users choose to connect to Runna.

2. Information we collect

We collect information only where it is needed to provide, secure, support, or improve Runna.

  • Account and profile information, such as name, email address, password authentication status, user role, account status, and organization or team membership.
  • Contact and messaging information, such as WhatsApp phone number, message delivery metadata, support messages, notification preferences, and consent or opt-out records.
  • Search, bounty, listing, and deal data, such as saved searches, budgets, locations, categories, listing links, bid ranges, market comparisons, notes, uploaded or pasted listing details, and user instructions.
  • Authentication and integration data, such as OAuth identifiers, access tokens, refresh tokens, granted scopes, expiry times, provider account IDs, and revocation or deletion records when a user connects a third-party account.
  • Payment and billing information if paid features are enabled, such as billing contact details, invoices, payment provider references, subscription status, and tax or compliance records.
  • Technical and usage data, such as IP address, browser and device type, operating system, pages viewed, referring URLs, timestamps, request IDs, error logs, security events, and approximate location derived from network information.
  • Cookies and similar technologies used for session management, security, preferences, analytics, and abuse prevention.

3. Google user data

If a user signs in with Google or connects a Google feature, Runna requests only the scopes needed for the feature the user chooses. Depending on the enabled feature, this may include basic profile details, email address, account identifier, and the limited Google API data covered by the scopes shown on the Google consent screen.

Runna uses Google user data to authenticate users, maintain account security, personalize the service, provide the connected feature, troubleshoot support requests, and comply with legal and security obligations. We do not sell Google user data. We do not use Google user data for advertising. We do not allow humans to read Google user data unless it is necessary for security, support, legal compliance, or a user has clearly asked us to investigate a specific issue.

Runna's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Meta, Facebook, Instagram, and WhatsApp data

If a user connects or interacts with Runna through Meta products, we may process the information needed for that interaction, such as app-scoped user ID, profile information allowed by the granted permission, Page or business identifiers, WhatsApp phone number, message metadata, webhook events, and permission or token records.

We use this data to deliver WhatsApp alerts, support user-requested marketplace or listing workflows, maintain integration security, respond to support requests, and process user deletion or revocation requests. We do not sell Meta platform data, and we do not use it for surveillance, credit eligibility, employment eligibility, housing eligibility, or other prohibited decisioning.

5. How we use information

  • Provide accounts, dashboards, saved searches, watchlists, deal alerts, and support workflows.
  • Send WhatsApp, email, and in-app notifications requested by users or required for service operation.
  • Compare listings, generate market context, estimate deal ranges, and explain bid or price signals.
  • Authenticate users, prevent fraud, detect abuse, protect accounts, and maintain audit logs.
  • Operate integrations with providers such as Google, Meta, WhatsApp Business providers, hosting, email, storage, analytics, and payment processors.
  • Improve reliability, performance, security, and product quality.
  • Comply with law, enforce terms, resolve disputes, and respond to lawful requests.

6. AI and automated processing

Runna may use automated rules and AI-assisted systems to classify requests, extract listing facts, compare prices, draft summaries, detect risk signals, route support issues, and generate deal explanations. Outputs are informational and should be reviewed before users make financial, purchase, sale, bid, or legal decisions.

We may use contracted AI or infrastructure providers to process user-provided listing, search, or support content solely to provide Runna features. We do not use Google user data or Meta platform data to train generalized AI models.

7. How we share information

We share information only as needed for the purposes described in this policy.

  • With service providers that host, store, secure, analyze, send, process, or support Runna.
  • With messaging and integration providers when needed to deliver WhatsApp, email, OAuth, or connected account features.
  • With payment processors if paid features are used.
  • With a user's organization or team administrators for accounts managed by that organization.
  • With third parties at the user's direction, such as when a user shares a listing, exports data, or connects an integration.
  • With authorities, courts, regulators, or affected parties where required by law or needed to protect rights, safety, security, or service integrity.
  • In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and privacy protections.

8. Retention

We keep personal information only for as long as needed for the purposes described in this policy, unless a longer retention period is required by law, security, fraud prevention, tax, accounting, audit, dispute resolution, or legitimate business needs.

Account records, support records, billing records, security logs, and audit logs may have different retention periods. OAuth tokens are deleted or revoked when they are no longer needed, when the connected account is removed, or when deletion is required.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption where appropriate, credential redaction, logging, provider security controls, and least-privilege operational practices. No internet service can guarantee perfect security, so users should protect their passwords, devices, email accounts, and WhatsApp accounts.

10. User choices and rights

  • Users may request access, correction, export, restriction, objection, or deletion of personal information, subject to identity verification and legal limits.
  • Users may opt out of non-essential marketing messages and may stop WhatsApp messaging by using the available opt-out instruction or contacting support.
  • Users may revoke Google access from their Google Account permissions page.
  • Users may remove Meta, Facebook, or Instagram app access from their Meta account settings.
  • Users may disable browser cookies, but some account, security, or preference features may not work correctly.

For deletion instructions, see Runna Data Deletion Instructions.

11. International processing

Runna may process and store information in Zimbabwe, the United States, the European Economic Area, and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

12. Children

Runna is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to Runna, contact us so we can review and delete it where required.

13. Changes to this policy

We may update this policy from time to time. If changes are material, we will take reasonable steps to notify users through the website, dashboard, email, WhatsApp, or another appropriate channel. The updated policy applies from the date shown above unless stated otherwise.

14. Contact

For privacy questions, security concerns, or data requests, contact Runna at runna-support@iswellmade.com. For security-specific issues, contact runna-security@iswellmade.com.