Privacy Policy

Last Updated: January 4, 2026

1. Introduction

RunnerReach ("we," "us," or "our") provides data-driven marketing and insights services to businesses, brands, and organizations in the running and endurance sports industry. This Privacy Policy explains how we collect, use, share, and protect information in connection with our B2B services.

2. Information We Collect

2.1 Athlete Data (From Partner Running Application)

We have access to athlete data collected through our partner running application, which includes:

• Personal Information: Name, email address, date of birth
• Running Activity Data: Race participation history, running events attended, pace, distance preferences, performance metrics
• Demographic Information: Age, location (city/state), gender (if provided)
• Account Information: Registration date, account status

Important: Athletes provided this data directly to our partner running application and consented to its use for monetization purposes, including email marketing and data insights, as stated in that application's privacy policy.

2.2 Business Client Information

When brands, event organizers, or businesses contact us for services, we collect:

• Name, email address, phone number, company name
• Campaign requirements and target audience specifications
• Payment and billing information
• Communication history and service preferences

2.3 Website Visitors

When you visit our website, we may collect:

• IP address, browser type, device information
• Pages visited, time spent on site, referring URLs
• Information submitted through contact forms

3. How We Use Information

3.1 Athlete Data Usage

We use athlete data to provide the following services to our business clients:

• Targeted Email Marketing: Send promotional emails on behalf of brands, event organizers, and product companies to specific athlete segments based on demographics, location, and running activity
• Affiliate Marketing: Send product recommendations and offers to athletes, with tracking links to measure conversions
• Audience Insights & Analytics: Create aggregated, anonymized reports about runner demographics, behavior patterns, pace distributions, and preferences for market research
• Campaign Targeting: Help clients identify and reach specific athlete segments (e.g., "marathon runners in California under age 40")

3.2 Business Operations

• Process and fulfill service requests from business clients
• Communicate with clients about campaigns, results, and services
• Improve our services and develop new offerings
• Comply with legal obligations and enforce our terms

4. How We Share Information

4.1 With Business Clients

• Aggregated Insights: We provide anonymized, aggregated data reports to clients (e.g., "35% of marathon runners in Texas are aged 25-35"). Individual athlete identities are never disclosed.
• Campaign Results: We share campaign performance metrics (open rates, click rates, conversions) but do not share individual athlete email addresses or personal information with clients.

4.2 Email Marketing on Behalf of Clients

When we send marketing emails to athletes on behalf of clients, we act as the sender. Athletes receive emails from RunnerReach (or our partner application name), with clear disclosure that the message is sent on behalf of a specific brand or event. We do not sell or provide athlete email lists to third parties.

4.3 Service Providers

We may share data with trusted service providers who assist us with:

• Email delivery platforms (e.g., SendGrid, AWS SES)
• Payment processing
• Data analytics and business intelligence tools
• Customer relationship management (CRM) systems

These providers are contractually obligated to protect data and use it only for specified purposes.

4.4 Legal Requirements

We may disclose information when required by law, to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety, or that of our users or the public
• Investigate fraud, security issues, or policy violations

5. Athlete Rights and Choices

5.1 Email Opt-Out (CAN-SPAM Compliance)

All marketing emails include an unsubscribe link. Athletes can opt out of future marketing emails at any time by clicking the "Unsubscribe" link in any email. We process opt-out requests within 10 business days as required by the CAN-SPAM Act.

5.2 Data Access and Deletion

Athletes may request to:

• Access: Obtain a copy of the personal data we have about them
• Correct: Update or correct inaccurate information
• Delete: Request deletion of their data from our systems (subject to legal retention requirements)

To exercise these rights, athletes should contact us at privacy@runnerreach.com or use the contact information in the original running application.

5.3 Do Not Sell My Information

We do not sell individual athlete email addresses or personal information to third parties. We use athlete data exclusively to provide marketing and insights services where we control the communication and data remains within our systems.

6. Data Security

We implement industry-standard security measures to protect data, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security audits and monitoring
• Employee training on data privacy and security

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain data for as long as necessary to:

• Provide services to business clients
• Comply with legal obligations (e.g., tax, accounting requirements)
• Resolve disputes and enforce agreements

Athletes who opt out of marketing emails will be added to a suppression list to prevent future emails, but their data may be retained in aggregated, anonymized form for analytics purposes.

8. International Data Transfers

Our services are based in the United States. If you are accessing our services from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your jurisdiction.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect or use personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Legal Compliance

This Privacy Policy is designed to comply with:

• CAN-SPAM Act: All marketing emails include opt-out mechanisms and accurate sender information
• CCPA (California Consumer Privacy Act): California residents have additional rights detailed in Section 5
• GDPR (where applicable): European users have rights to access, correct, delete, and port their data

Note: This is a template Privacy Policy. Please consult with legal counsel to ensure compliance with all applicable laws and regulations in your jurisdiction before using this document.