Privacy Policy
This Privacy Policy explains how Masterful Ventures LLC, a New Mexico limited liability company doing business as processrun ("processrun," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit processrun.com (the "Site"), submit a form or inquiry, book a call with us, or engage us for our consulting and AI implementation services (the "Services").
Plain-English summary: We collect the information you give us through the Site (name, email, phone, company, what you wrote in the form), basic technical data from your visit, and information needed to deliver our Services. We use it to respond to you, deliver work, and run our business. We do not sell your personal information. We share it only with the vendors that help us run the Site and the engagement.
1. Who we are (data controller)
- Legal entity: Masterful Ventures LLC (DBA processrun)
- Email: hello@processrun.com
- Phone: (575) 515-5262
2. Scope
This Policy applies to personal information we collect through the Site and in the course of providing Services to clients and prospective clients. It does not apply to information you provide directly to third-party platforms (for example, a calendar booking provider's own account, payment processors, or AI vendors) — those parties handle that information under their own privacy policies.
3. Information we collect
3.1 Information you provide
- Contact and inquiry information submitted through forms on the Site, such as your name, business email, phone number, company name, role, website, and any free-text messages or context you share about your business situation.
- Booking information when you schedule a call with us through our scheduling tools, including the date and time, time zone, and any pre-call questions you answer.
- Engagement information shared during the course of an engagement, including business documents, process information, system access details, recordings of meetings (only when both parties have consented to recording), and other materials you provide so we can deliver the Services.
- Billing information needed to invoice you (e.g., billing contact, address, tax ID). Payment card or bank-account details, if any, are collected and processed directly by our payment processor; we do not store full card numbers on our systems.
- Communications when you email, message, or otherwise contact us.
3.2 Information collected automatically
- Device and usage data, such as IP address, browser type and version, operating system, referring URL, pages viewed, time on page, and date/time of access.
- Cookies and similar technologies. The Site uses a small set of cookies and similar technologies for essential functionality and basic analytics. See Section 8 (Cookies).
3.3 Information from third parties
We may receive limited information about you from public sources, business directories, or referrals (for example, a colleague who suggested we connect), and from the third-party platforms we use to schedule, communicate, and deliver Services.
4. How we use information
We use personal information to:
- Operate, maintain, and improve the Site and the Services;
- Respond to inquiries, schedule and conduct discovery and consultation calls, and answer questions;
- Deliver Services to clients, including audits, roadmaps, implementations, and ongoing operator engagements;
- Send transactional and engagement-related communications (e.g., booking confirmations, contract documents, invoices, status updates, reports, and reminders);
- Send occasional marketing or update emails if you have opted in or are an existing or prior client (you can unsubscribe at any time using the link in the email or by writing to us);
- Maintain books, records, and contracts, comply with our legal, tax, and accounting obligations, and exercise or defend legal claims;
- Detect, prevent, and address fraud, abuse, security incidents, and unauthorized access; and
- For any other purpose with your consent.
5. Legal bases (for individuals in the EEA / UK)
If the General Data Protection Regulation (GDPR) or UK GDPR applies to you, we rely on the following legal bases:
- Contract: to take steps at your request before entering into a contract and to perform a contract with you (e.g., responding to inquiries, delivering Services).
- Legitimate interests: to operate, secure, and improve the Site and Services, to communicate with prospective and existing clients, and to maintain business records — provided those interests are not overridden by your rights.
- Legal obligation: to comply with tax, accounting, and other legal requirements.
- Consent: where required (e.g., certain marketing emails or non-essential cookies). You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. How we share information
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws. We disclose information to:
- Service providers and processors that help us run the business under written contracts that limit their use of your information. Categories include website hosting and infrastructure; database and backend services; email, calendar, and scheduling tools; spreadsheet and document tools; communications and meeting platforms; CRM and lead-management tools; payment processing; analytics; and AI / large-language-model providers used to deliver the Services.
- Professional advisors such as our accountants, lawyers, and insurers, where reasonably necessary.
- Authorities and others when we believe in good faith that disclosure is required to comply with a legal obligation, valid legal process, or government request, or to protect the rights, property, or safety of processrun, our clients, or others.
- In a business transaction such as a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred to the successor entity, subject to this Policy or a successor policy.
7. AI and automated tools
To deliver the Services we use third-party AI tools (for example, large-language-model APIs and workflow automation platforms). When we input client materials into such tools, we configure them, where reasonably available, in a manner intended to prevent the vendor from using that data to train its public models. The exact tools used in a given engagement are documented in or available on request alongside the applicable engagement agreement. We do not make significant decisions about you that produce legal or similarly significant effects solely on the basis of automated processing.
8. Cookies and analytics
The Site uses a small number of cookies and similar technologies for essential functionality (e.g., remembering form state) and basic, privacy-respecting analytics to understand how visitors use the Site. You can control cookies through your browser settings, including blocking or deleting them; doing so may affect Site functionality. Where required by law, we will request your consent for non-essential cookies through a cookie banner before placing them.
9. Data retention
We retain personal information for as long as necessary for the purposes described in this Policy, including to provide the Services, maintain business and tax records, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention guidelines:
- Inquiry / lead form submissions: up to 24 months from last contact, then deleted or anonymized, unless you become a client.
- Client engagement records, contracts, and invoices: for the duration of the engagement and for up to 7 years after, to comply with tax, accounting, and audit requirements.
- Server logs and basic analytics: typically up to 24 months.
You may request earlier deletion as described in Section 11 (Your rights), subject to our legal and recordkeeping obligations.
10. Security
We use commercially reasonable administrative, technical, and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission over the internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and any system access we share during an engagement confidential.
11. Your rights
11.1 Rights available to most individuals
You may contact us at any time to:
- Ask what personal information we hold about you;
- Correct inaccurate information;
- Request deletion of information that we are not legally required or permitted to retain;
- Object to or restrict certain processing; and
- Unsubscribe from marketing emails.
11.2 EEA / UK residents
Subject to the GDPR or UK GDPR, you also have the right to data portability, the right to withdraw consent, and the right to lodge a complaint with your local data protection authority.
11.3 California residents (CCPA / CPRA)
If you are a California resident, you have the right to: (i) know the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it; (ii) request deletion of personal information we collected from you; (iii) request correction of inaccurate personal information; and (iv) be free from unlawful discrimination for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising, and we do not knowingly collect personal information from minors under 16. You may submit a request by emailing hello@processrun.com. We may need to verify your identity before fulfilling certain requests, and you may use an authorized agent (with appropriate documentation).
11.4 Other U.S. state laws
Residents of other U.S. states with comprehensive privacy laws (including, for example, Virginia, Colorado, Connecticut, Utah, and Texas) may have similar rights to access, correct, delete, and obtain a copy of personal information we hold about them, and to opt out of certain processing. Submit requests to hello@processrun.com.
12. International transfers
We are based in the United States. If you access the Site or engage us from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate, which may have data protection laws different from those in your country. Where required by law, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
13. Children
The Site and Services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
14. Third-party links
The Site may contain links to third-party websites and services. We are not responsible for their content or privacy practices. We encourage you to review their privacy policies before providing them with personal information.
15. Changes to this Policy
We may update this Policy from time to time. The "Effective date" above shows when it was last revised. Material changes will be reflected by updating the date and, where appropriate, by additional notice on the Site. Your continued use of the Site or Services after the Effective date constitutes acceptance of the updated Policy.
16. Contact
To exercise any right, ask a question about this Policy, or report a privacy concern, contact:
Masterful Ventures LLC (DBA processrun)
Attn: Privacy
Email: hello@processrun.com
Phone: (575) 515-5262
Location: Doña Ana County, New Mexico, USA