Privacy Policy

Plain language for customers. This is not a substitute for legal advice or a formal opinion from an attorney. We wrote it so you can see how we handle data and cards in practice. If you need a formal legal review for a large contract or a regulated industry, talk to counsel.

RunKeepAI (“we,” “us,” or “our”) operates justmoving.ai, the licensed desk products (MoveDesk, FloorDesk, PoolDesk, RealtorDesk), and related RunKeepAI hosts (including runkeepai.com and app.runkeepai.com). This policy is the notice we give at or before we collect personal information from you on these services.

1. Information We Collect (notice at collection)

We collect only what we need to run the marketing site, issue access, bill leases, and operate the desk software. Categories below follow common U.S. privacy-notice practice (including California-style “categories of personal information”).

Website & access requests (justmoving.ai)

• What you submit on Get an access code or contact forms: name, company, email, phone if given, message.
• Technical data our host records for security and operations.

Desk software accounts

• Login, company/staff profile, and all business records you create in the product.
• Usage needed to run the product (session cookies, device/browser for sign-in, security logs).

We do not require an account just to browse public marketing pages.

Sensitive personal information

We do not seek government ID numbers, precise geolocation for marketing, biometric templates, health diagnoses, or financial account numbers for your software lease. Full payment card numbers are never entered into our forms (see §2). If you or your staff put sensitive data into a free-text job note, treat that as your company’s data under §5 — we process it only to host the product.

2. Payments & Credit Cards (PCI DSS)

When you subscribe or put a card on file, checkout happens on a secure page hosted by our payment processor — primarily Stripe Checkout (checkout.stripe.com) and, where offered, PayPal. Card details are typed on the processor’s domain. That is the standard way to stay out of full cardholder-data scope under PCI DSS (typically Self-Assessment Questionnaire A when no card data touches your servers).

Our systems may store only non-sensitive billing status: plan, trial/end dates if any, invoice history, “card on file,” and the processor’s customer/lease IDs. We use those only to run your lease, handle failures, and support refunds.

If any screen on our domain ever asks for a full card number, CVV, or full PAN, that is a bug — stop and email us immediately at [email protected].

Processors are PCI-certified service providers with their own privacy policies (for example Stripe’s published security and privacy documentation). We use them only to charge for the software you ordered and related billing support — not to sell payment data.

3. How We Use Information

• Provide and operate websites and desk software.
• Create accounts, issue access codes, and support sign-in.
• Bill for leases and communicate about payment status.
• Respond to support requests; improve reliability and security.
• Send product-related messages you configure (for example customer texts from a desk).
• Comply with law, enforce terms, and prevent fraud or abuse.

We do not sell your personal information. We do not rent or trade contact lists. We do not use your desk customers as a marketing list for RunKeepAI.

4. How We Share Information

We share information only when needed to run the product:

• Infrastructure providers (hosting such as Cloudflare, databases, email delivery, SMS providers) under contracts that require them to protect data and use it only for our services.
• Payment processors (Stripe, PayPal where used) for checkout and billing.
• Legal requirements if the law requires disclosure, or to protect rights, safety, and security.

We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are used in California law.

5. Your Customers’ Data (B2B / service-provider role)

When your company stores end-customer or job data in a desk, you decide what to collect from your customers. You must only enter data you have a right to use. For that business content, RunKeepAI acts as a service provider / processor: we host and process it to provide the software to you, not to market to your customers as RunKeepAI and not to sell it.

You are responsible for your own privacy notices to your customers (for example if you text them job updates). Our product may help you send those messages; the relationship with the end customer is yours.

6. AI Features

Desk AI tools help draft text, fill forms, and answer questions about work you put in the product. Outputs can be wrong — you must review before sending to customers or relying on them for decisions. We do not use AI to make legally binding decisions about people without human involvement as a substitute for your judgment. We do not sell prompts or customer records as training data to the public. Model providers process content only as needed to return a response under our agreements with them.

7. SMS, Text, & Email

If you or your end customers provide a phone number for desk features (quotes, job updates, reviews), messages are part of the product you use. Message and data rates may apply. Recipients can reply STOP to opt out where that channel supports it. Marketing texts, if any, require separate consent and are never a condition of buying software. Transactional email (access codes, receipts, security) may be sent as needed to operate the service.

8. Cookies & Tracking

Public marketing pages are lightweight and do not use advertising trackers or sell data to ad networks. Desk apps use necessary cookies / session storage to keep you signed in and secure. We do not run third-party ad pixels for behavioral advertising on these products.

9. Security

Sites and apps are served over HTTPS. Passwords are hashed. Access to production systems is restricted. Card data stays with PCI-certified processors. No internet system is perfectly secure; we take reasonable measures appropriate to a small SaaS business and expect you to protect logins and access codes. If a breach of personal information occurs that triggers legal notice duties, we will notify affected parties and regulators as required by applicable law.

10. Data Retention

See the table in §1 for typical periods. Account and business records are kept while your account is active and for a reasonable period afterward for backups, billing, and legal requirements. You may request export or deletion of account data; we will respond as permitted by law and operational constraints (we may retain invoice and fraud-prevention records we must keep).

11. Your Rights (California, New Jersey, other U.S. states, GDPR)

Depending on where you live, you may have rights to:

• Know / access what personal information we hold about you
• Correct inaccuracies
• Delete personal information (subject to legal exceptions)
• Portability — receive a copy in a usable format
• Opt out of sale / sharing — we do not sell or share for ads (see §12)
• Limit use of sensitive PI where that right applies
• Non-discrimination for exercising privacy rights

California (CCPA/CPRA): If you are a California resident and the law applies to us for your request, you may exercise the rights above. We will verify identity and respond within the timelines the statute requires (generally up to 45 days, with a permitted extension when needed).

New Jersey and other U.S. state privacy laws: We operate from New Jersey. Comprehensive state laws (including New Jersey’s consumer privacy framework) often apply only above certain volume or revenue thresholds. Even when a statute does not formally apply, we honor reasonable access, correction, and deletion requests for personal data we control about you as a customer or website visitor.

EEA/UK (GDPR): If we process your personal data and GDPR applies, you may have rights of access, rectification, erasure, restriction, portability, and objection. Contact us the same way; lawful basis for core service is typically contract performance and legitimate interests in security and service improvement.

To exercise rights: email [email protected] with the subject line “Privacy request” and enough detail for us to find your account (email used, company name). Authorized agents may submit requests where the law allows; we may still need to verify the consumer.

12. Do Not Sell or Share My Personal Information

We do not sell personal information and we do not share it for cross-context behavioral advertising. There is nothing to opt out of on that basis today. If that ever changes, we will update this policy and provide a clear opt-out link on justmoving.ai before any sale or share begins. You can still email us to confirm: [email protected].

13. Children (COPPA)

Our sites and software are for businesses and adults. We do not knowingly collect personal information from children under 13. Contact us if you believe a child provided data so we can delete it.

14. Where We Operate

We operate from New Jersey, USA. Data is processed in the United States (and by subprocessors that may use U.S. or other regions as disclosed in their terms). If you access the services from elsewhere, you understand your information may be processed in the U.S.

15. Changes

We may update this policy. When we do, we change the “Last updated” date. Material changes that expand collection or use in a significant way may also be noted on justmoving.ai or in-product notices.