JobWin Privacy Policy

This Privacy Policy describes how Runx Inc. ("Runx," "JobWin," "we," "our," or "us") collects, uses, shares, retains, and protects information when you use our websites, applications, APIs, integrations, and related services (collectively, the "Service").

This policy applies to business users, workspace members, website visitors, and customer/support contacts whose information is processed through the Service.

1. Who We Are

Data controller/service operator: Runx Inc. (JobWin)
Address: 1326 S Michigan Ave, Chicago, IL 60605, USA
Email: go@jobwin.io
Website: https://jobwin.io
Application: https://app.jobwin.io

2. Scope and Role

We process information to provide a lead-to-estimate workflow for service businesses, including integrations, communication workflows, scheduling, and automation.

In many cases, workspace owners determine what customer data is submitted to JobWin. In those cases, we may process information on behalf of the workspace under applicable agreements and law.

3. Categories of Information We Collect

• Account and identity information: name, email, phone, password hash/auth data, company name, and profile details.
• Workspace and configuration information: service categories, territories, languages, workflows, reminders, and team permissions.
• Lead and customer records: contact details, addresses, project details, notes, qualification data, and status history.
• Communications and engagement records: inbound/outbound messages, drafts, metadata, delivery timestamps, and message event logs.
• Scheduling and operations records: appointments, estimate dates, reminders, and internal workflow actions.
• File and media content: photos, documents, voice notes, transcripts, and related metadata.
• Integration data: OAuth tokens, connected account IDs, business IDs, webhook payloads, sync status, and API response metadata.
• Billing and commerce metadata: plan type, invoice metadata, payment status, and processor transaction references.
• Technical and diagnostics data: IP address, device/browser information, app usage telemetry, log events, and security signals.

4. Sources of Information

• Information you provide directly (account setup, forms, uploads, support requests).
• Information from your workspace members and authorized collaborators.
• Information from connected third-party platforms and APIs you authorize.
• Information generated automatically through use of the Service.

5. How We Use Information

• Provide, secure, maintain, and improve Service functionality.
• Authenticate users and manage account/workspace access.
• Process integrations, token exchanges, webhooks, and data synchronization.
• Power lead handling, communication workflows, and scheduling operations.
• Generate AI-assisted outputs such as summaries, response drafts, and suggestions.
• Detect, prevent, investigate, and respond to fraud, abuse, and security incidents.
• Provide customer support and service notifications.
• Operate billing, financial reconciliation, and internal reporting.
• Comply with legal obligations and enforce agreements.

6. Legal Bases for Processing

Depending on jurisdiction, we rely on one or more of the following legal bases:

• Performance of a contract with you.
• Legitimate interests (for example, security, reliability, and product analytics).
• Compliance with legal obligations.
• Your consent, where required by law.

7. OAuth and Integration Data

When you connect an integration (such as Thumbtack), you authorize JobWin to receive and process data available under granted scopes and permissions. We store integration credentials in protected systems and use them only to operate authorized workflows.

If you disconnect an integration or permissions are revoked, related workflows may stop functioning. Historical records already processed may remain in your workspace according to retention settings and legal obligations.

8. AI and Automated Features

If enabled, AI features may process contextual data (including communications, lead details, notes, and transcripts) to generate content, summaries, and recommendations. Outputs may be inaccurate or incomplete. You remain responsible for final review and decisions before sending messages, scheduling work, or taking other business actions.

9. Communications Compliance

If your workspace uses messaging or automation features (including SMS, email, or future voice workflows), you are responsible for obtaining and maintaining all legally required notices and consents for your recipients and customers.

You may configure, limit, or disable communication automation settings in the Service.

10. Cookies and Similar Technologies

We and our service providers use cookies, local storage, and similar technologies for session management, security, preferences, analytics, and performance monitoring.

• Essential/session cookies: sign-in state, security, and core functionality.
• Preference cookies: workspace and UI preferences.
• Analytics and performance tools: product quality and reliability insights.

You may adjust browser settings to block some cookies, but this may reduce functionality. Do Not Track signals may not be interpreted consistently due to lack of a uniform technical standard.

11. Sharing and Disclosures

We may disclose information to:

• Hosting, infrastructure, support, and security service providers/subprocessors.
• Integration platforms and API partners that you explicitly connect.
• Professional advisors (legal, accounting, audit, insurance) where needed.
• Law enforcement, courts, and regulators when required by law.
• Parties involved in a merger, acquisition, financing, or asset transfer.

We may share aggregated or de-identified information that cannot reasonably identify an individual.

12. Sale/Sharing for Advertising Context

We do not sell personal information in the traditional sense of selling user lists for money. We also do not use your workspace customer data to build third-party advertising profiles unrelated to providing the Service.

13. International Transfers

Your data may be processed in countries other than your own. Where required, we use lawful transfer mechanisms and contractual safeguards for cross-border processing.

14. Data Retention

We retain data for as long as necessary to provide the Service, meet legal obligations, resolve disputes, enforce agreements, and protect platform security.

• Account/workspace records: generally retained while account is active.
• Lead/customer/communication records: retained per business and legal requirements.
• Audit, diagnostics, and security logs: retained per compliance/security needs.
• Backups: retained for continuity and disaster recovery windows.

Deletion requests may be limited where retention is required for legal, contractual, or security reasons.

15. Security

We use administrative, technical, and organizational safeguards intended to protect data from unauthorized access, loss, misuse, and disclosure. No system can guarantee absolute security. You are responsible for protecting credentials and limiting workspace access to authorized users.

16. Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, export, or restrict processing of personal information, and to withdraw consent where consent is the legal basis.

To submit a request, contact go@jobwin.io. We may verify identity and authority before processing. We may deny or limit requests when legally permitted.

17. Authorized Agents and Appeals

Where law permits, authorized agents may submit requests on your behalf with adequate proof of authorization. If we decline a request, you may contact us for review and, if applicable, submit an appeal as provided by local law.

Target response window: within 30 days or as required by applicable law.

18. U.S. State Privacy Notice

Residents of certain U.S. states (including California, where applicable) may have additional rights concerning access, correction, deletion, and non-discrimination for exercising privacy rights.

19. Children

The Service is intended for business users and is not directed to children under 13 (or the minimum age required by local law). We do not knowingly collect personal information from children in violation of law.

20. Third-Party Sites and Services

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies, and we encourage you to review those policies directly.

21. Policy Changes

We may revise this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

22. Contact Us

Runx Inc.
1326 S Michigan Ave, Chicago, IL 60605
Privacy requests: go@jobwin.io
Website: https://jobwin.io
Application: https://app.jobwin.io