AquaRunner247 Privacy Policy

Version: 1.4
Effective Date: November 10, 2026
Last Updated: November 12, 2026

Contents

1. Introduction and Scope
2. Who We Are and Contact Information
3. Key Terms
4. Personal Information We Collect
5. How We Collect Information
6. How We Use Information and Our Legal Bases
7. Location, Photos, Document Scanning, and Automated Phone Calls
8. QR Codes, Portals, and Compliance Records
9. Cookies and Similar Technologies
10. How We Share Information
11. Customer Data and Our Processor Role
12. International Data Transfers
13. Data Retention
14. Security and Privacy Incidents
15. Children’s Privacy
16. U.S. State Privacy Rights
17. Nevada Privacy Notice
18. Rights in the European Economic Area and United Kingdom
19. Marketing and Communication Choices
20. Third-Party Links and Services
21. Do Not Track and Global Privacy Control
22. Changes to This Policy
23. Contact Us
24. Attorney Review Notice

1. Introduction and Scope

AquaRunner247 (“AquaRunner247,” “we,” “us,” or “our”) provides software and related services for pool service and maintenance businesses. Our services include route management, residential and commercial pool records, state-specific inspection checklists, chemical logs, QR-code access to pool records, geolocation-based arrival and departure tracking, photo-based visit documentation, dosage calculations, document scanning, customer and inspector portals, and related support (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and otherwise process Personal Information through our website at aquarunner247.com, our mobile application, portals, communications, and other Services.

The Services are intended primarily for businesses and their personnel. Pool service companies and other business customers may enter information about their technicians, customers, properties, property owners or managers, and other individuals. If you are an individual whose information a customer has submitted to the Services, that customer may control how your information is collected and used. See Section 11.

This Policy does not replace any separate privacy notice or data processing agreement that applies to a particular Service or relationship. If a separate agreement conflicts with this Policy regarding information we process on a customer’s behalf, that agreement will govern to the extent of the conflict.

2. Who We Are and Contact Information

The company responsible for the Services is:

AquaRunner247 LLC, doing business as AquaRunner247
Registered address: 732 S 6th St, Ste N, Las Vegas, NV 89101
Privacy contact: privacy@aquarunner247.com
Website: https://aquarunner247.com

For information about the role AquaRunner247 and a business customer each play in processing customer data, see Section 11.

3. Key Terms

• Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household, or similar information protected by applicable law.

• Processing means collecting, using, storing, disclosing, or otherwise handling information.

• Controller means the person or organization that decides why and how Personal Information is processed. Some laws use the term “business.”

• Processor means the person or organization that processes Personal Information on behalf of a Controller and under its instructions. Some laws use the term “service provider.”

• Customer means a business or other person or organization that subscribes to, administers, or uses the Services.

• End User means an individual authorized by a Customer to use the Services, such as an account administrator, office staff member, or pool technician.

• Customer Data means information submitted to or collected through the Services by or for a Customer, including information about the Customer’s personnel, customers, properties, and service visits.

• Organization means a pool service company or other business that subscribes to the Services; an Organization acts as Controller or business for the Customer Data it enters into the Services.

• End Customer means a customer of an Organization who is given access to the customer portal to view service history, chemistry readings, and other information the Organization shares. If you are an End Customer, your pool service company (the Organization) controls what information about you is entered into the Services and how it is used for its business purposes; questions about your data are often best directed to your pool service company first.

• You means a visitor to our website, a Customer, an End User, or another individual whose information we process.

The Services are intended for use within the United States. Customer Data is stored and processed in the United States by AquaRunner247 and by the service providers listed in Section 10, with one exception described there and in Section 12: the geocoding, driving-route, and map-tile providers that convert a property address into map coordinates and calculate travel times operate outside the United States.

4. Personal Information We Collect

The information we collect depends on how you interact with us and how a Customer configures and uses the Services. It may include the following categories:

Information in pool records, photos, files, or service notes may contain information about other people, including property owners, managers, tenants, employees, visitors, or inspectors. Customers and End Users should not submit information that is unnecessary for the Services.

We do not intentionally request government-issued identification numbers, account passwords for unrelated services, or payment card security codes in Customer Data. The Services are not designed to collect Social Security numbers, government ID numbers, health information, or similarly sensitive categories, and Organizations agree not to input such data into the Services. Do not submit sensitive Personal Information unless it is necessary for use of the Services and authorized by the relevant person and applicable law.

5. How We Collect Information

We may collect Personal Information:

1. Directly from you, such as when you create an account, contact us, subscribe, or submit support requests.
2. From a Customer or End User, including account administrators who create user profiles, assign routes, or enter property and service details.
3. From your device, including location, app use, diagnostic data, and information needed for offline functionality and later synchronization, subject to permissions and settings.
4. Through the Services, including when users log readings, complete inspection checklists, scan documents, take photos, create QR-code records, or use portals.
5. From service providers and integrations, such as payment processors, analytics providers, mapping services, communication providers, or identity and authentication services, where used.
6. From publicly available or other lawful sources, where appropriate to provide, secure, or improve the Services.

6. How We Use Information and Our Legal Bases

We may use Personal Information to:

• Create, maintain, authenticate, and administer accounts and subscriptions.
• Provide, operate, and support the Services, including route planning, pool records, inspection workflows, QR-code access, customer and inspector portals, offline synchronization, and automated email reports.
• Record arrivals, departures, readings, dosages, photos, inspections, and other visit information at a Customer’s direction.
• Generate calculations, summaries, document extractions, alerts, and other outputs. The Services may use automated processing to identify data, extract equipment details from uploaded documents, flag blurry images, or perform other operational tasks.
• Process billing, prevent fraud, maintain security, troubleshoot issues, and enforce our agreements.
• Communicate about accounts, service changes, support, product updates, and, where permitted, marketing.
• Analyze usage and performance, develop and improve features, and test the Services.
• Comply with legal obligations, respond to lawful requests, protect rights and safety, and resolve disputes.

Where required by applicable law, we rely on one or more legal bases, which may include performing a contract, pursuing legitimate interests, obtaining consent, complying with legal obligations, or protecting vital interests. The applicable basis depends on the information and the purpose. Where we rely on consent, you may withdraw it as described in this Policy or in the relevant consent interface. Withdrawal does not affect processing that occurred before withdrawal.

Outputs from our state compliance and inspection engine, dosage calculator, document scanner, and other automated features are intended as operational tools. They are not legal, regulatory, medical, health-department, or professional advice. Customers and End Users are responsible for reviewing outputs, confirming readings and extracted information, and determining what is appropriate for a property and its circumstances.

7. Location, Photos, Document Scanning, and Automated Phone Calls

7.1 Location and background location

Some features use location information to support routes, geofenced arrival and departure logging, and visit documentation. Depending on the feature, your device settings, and permissions you grant, the app may collect location information while the app is in use and, if background location permission is enabled, while the app is running in the background or closed. Location collection may not function as intended if permissions are denied, device settings are changed, or location services are unavailable.

The Services record two moments for a service visit: the arrival, which is stored together with the position fix that detected it, and the departure, which is stored as a time only. A departure is worked out on the device by comparing recent position readings to the property’s own location, and only the resulting time is sent to us — never a position, and never anywhere the technician went afterward. The two times are used to show how long a visit took and to alert an Organization when a technician appears to have left a stop without finishing it.

You can generally disable or change location permissions through your device’s operating system settings. A Customer administrator may also control certain Service settings. Disabling location may limit or prevent geofenced arrival and departure detection and related features, but does not necessarily remove location information already recorded in Customer Data.

7.2 Photos and files

When an End User takes or uploads a photo, the Services may associate it with a service visit and record the date, time, or location, depending on the device, app settings, and permissions. The Services may analyze photo quality, including detecting whether an image appears blurry. Photos can capture people or other information unintentionally; users should avoid including people or unnecessary sensitive details.

Customers and End Users may upload inspection reports and other documents. The document scanner may extract equipment make, model, and serial-number information or other information from those files. Extracted information may be incomplete or inaccurate and should be reviewed by the user. Customers are responsible for ensuring they have appropriate authority to upload documents and information about others.

7.3 Automated phone calls, recording, and artificial intelligence

A Customer may connect a phone number to the Services. When it does, a call to that number that the Customer’s own line does not answer — because it is outside their business hours, or because nobody picked up — is answered by an automated system rather than by a person.

What the caller is told, before anything is captured. The first thing the automated system says, on every call and on every path, is that the call is handled by an automated system rather than a person, that it is recorded and transcribed, that artificial intelligence is used to understand the request, and that a caller who would rather not be recorded, or would rather speak to a person, should hang up and call back during business hours. Nevada, where we operate, requires the consent of all parties to record a telephone call, as do several other states. That notice is spoken before any recording, any speech capture, and any audio is sent to an AI provider, and a caller who stays on the line after hearing it consents to being recorded. The notice is not configurable by a Customer and cannot be switched off.

What the automated system does. Depending on the Customer’s configuration, it either asks a short series of questions and records the answers, or holds a spoken conversation with the caller. In the conversational mode, the caller’s audio is streamed live to our AI provider during the call so that the system can respond. In both modes the recording is transcribed, and the transcript is processed by an AI model that turns it into a structured service request, which is emailed to the Customer. The subprocessors involved — our telephony provider, our AI provider, and our conversational-agent provider — are listed in Section 10, and all of them process this information in the United States.

Information the automated system can reveal. If the number a caller is calling from matches a property on a Customer’s account, the automated system can tell that caller when their next service visit is scheduled, when their pool was last serviced, and which technician is assigned to them. It answers those questions only for the account already matched to the incoming number, and it will not look up any other account, including one the caller names during the call. A caller whose number is not matched is not told anything about any account.

Accuracy and limits. An automated transcript or AI summary can be wrong, incomplete, or garbled, and the recording is retained as the authoritative record of what was said. The automated system does not make decisions about anyone; it takes a message and passes it to the Customer.

Retention and choices. Call recordings and transcripts are retained with the service request they generated and deleted 30 days after the Customer’s subscription ends — see Section 13. A caller who does not want to be recorded can hang up during the notice and reach a person by calling during the Customer’s business hours. To ask about a recording of a call you made, contact us at privacy@aquarunner247.com; because these recordings are Customer Data, we will generally refer the request to the Customer, as described in Section 11.

8. QR Codes, Portals, and Compliance Records

A Customer may create a QR code for a pool, spa, splash pad, fountain, or other body of water. Scanning the code may provide access to the records or information configured for that code, which may include time-stamped chemical logs, inspection histories, service information, or other compliance records. Depending on the Customer’s settings and the design of the feature, information may be available to people who scan the code, including inspectors, property managers, or others with access to the code or link.

Customers determine what records are associated with each QR code and are responsible for reviewing those records before making them accessible. Do not include information in a QR-linked record that should not be visible to a person who can scan or access the code. The public compliance log — the page a scanned QR code opens for someone with no account — is published only for a commercially regulated body of water in a state whose compliance rules we support. It is not published for a residential property. Portal access may also expose information to Customer-selected users, such as customers, property managers, or inspectors, according to the Customer’s access settings.

9. Cookies and Similar Technologies

Our website and Services may use cookies, pixels, local storage, software development kits, and similar technologies to operate the Services, remember preferences, maintain security, understand usage, and improve performance. Some technologies may be provided by analytics, hosting, or other service providers.

Today we use only strictly necessary cookies: the authentication cookies that keep you signed in. Our website analytics are cookieless and do not set or read an identifier on your device. Because we do not use cookies for advertising, analytics profiling, or any non-essential purpose, we do not operate a cookie consent banner or preference centre. You may still manage or block cookies through your browser or device settings, though blocking the authentication cookies will prevent you from signing in.

We will update this Policy and our preference tools if we use cookies or similar technologies for targeted advertising, cross-context behavioral advertising, or other purposes that require additional notice or consent.

10. How We Share Information

We may disclose Personal Information as described below:

• Service providers and subprocessors: Vendors that support hosting, storage, security, analytics, payment processing, mapping, communications, customer support, or other Service functions, as listed by name in the subprocessor table below. This table is stated as of the Last Updated date above and will be kept current as our provider stack changes.
• Customers and End Users: Information is made available to the Customer that controls the account and to its authorized users according to account roles and settings.
• Customer-selected recipients: Information may be shared through reports, portals, QR codes, or other features with people a Customer selects, including customers, property managers, inspectors, or other recipients.
• Integrations and third-party services: Information may be shared with an integration or service when a Customer or End User enables or uses it.
• Professional advisers: Lawyers, accountants, auditors, insurers, and other professional advisers, subject to appropriate confidentiality obligations.
• Authorities and other parties: Where we reasonably believe disclosure is required by law, legal process, or a valid government request, or is necessary to protect rights, safety, security, or the Services.
• Business transfers: In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable legal requirements.
• At your direction or with your consent: In other circumstances where you request or authorize disclosure.

Subprocessors

As of the Last Updated date above, our subprocessors are:

We do not share Personal Information with Intuit or QuickBooks. The Service generates accounting files in a QuickBooks-compatible format that an administrator downloads; it does not connect to, or transmit anything to, an Intuit account.

If we add or replace subprocessors, we will update this list and this Policy. Organizations may also be notified of subprocessor changes as described in the applicable Data Processing Agreement. The same list is published at aquarunner247.com/subprocessors.

Sale and targeted advertising status: We do not sell Personal Information, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined by applicable law. We do not use advertising networks, advertising identifiers, or third-party advertising cookies or pixels anywhere in the Services or on our website. Because we do not sell or share Personal Information, there is no sale or sharing for you to opt out of.

11. Customer Data and Our Processor Role

When a Customer or its End User enters information about technicians, customers, properties, service visits, or other individuals into the Services, the Customer generally determines the purposes and means of that processing. In those circumstances, the Customer acts as Controller or business, and AquaRunner247 acts as Processor or service provider, processing Customer Data on the Customer’s documented instructions and as needed to provide, secure, and support the Services.

The Customer is responsible for providing appropriate notices to individuals, obtaining any required permissions or consents, establishing lawful instructions, configuring QR codes and portal access appropriately, and responding to privacy requests relating to Customer Data. An individual whose information is held in a Customer’s account should generally contact that Customer first.

Our processing of Customer Data is further described in the applicable Data Processing Agreement (“DPA”). The DPA may address processing instructions, confidentiality, security, subprocessors, assistance with data subject requests, incident notice, and return or deletion of Customer Data. Contact the Customer or privacy@aquarunner247.com to request information about the applicable DPA.

AquaRunner247 may act as Controller for information it processes for its own purposes, including account administration, billing, website operation, security, support, and product improvement.

12. International Data Transfers

The Services are intended for use within the United States, and we store Customer Data in the United States. Our hosting, database, storage, email, telephony, payment, monitoring, and AI subprocessors all process information in the United States.

Three map-related providers are the exception. Converting a property address into map coordinates, calculating driving routes and travel times, and drawing street map imagery are performed by the OpenStreetMap Foundation and FOSSGIS e.V., which operate their services from Europe. As a result, property street addresses and the map coordinates of service stops are transmitted outside the United States when those features run. No chemistry readings, inspection records, photos, documents, call recordings, contact names, email addresses, or phone numbers are sent to those providers. See the subprocessor table in Section 10.

These are transfers from the United States to Europe, which United States law does not restrict. If we ever process Personal Information that originates in the European Economic Area or the United Kingdom, and applicable law requires a transfer mechanism, we will use an appropriate safeguard, which may include an adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement or UK Addendum, or another lawful mechanism.

You may contact us at privacy@aquarunner247.com for information about relevant transfer safeguards, subject to applicable law and confidentiality restrictions.

13. Data Retention

We retain Personal Information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, meet contractual or legal obligations, resolve disputes, maintain security, and enforce agreements. Retention may vary by information type, Customer settings, and applicable law. When information is no longer required, we will delete, de-identify, or securely dispose of it, subject to legal, technical, and backup limitations.

At the end of a subscription, Customer Data remains available for export for 30 days, after which it is deleted or de-identified, except as described in the next paragraph or to the extent retention is required or permitted by law or is necessary for security, backup, or dispute-resolution purposes.

13.1 What we keep indefinitely, and why

Health-department compliance logging for a commercial pool or spa is tied to the body of water, not to whoever happens to be servicing it. If we deleted the water-reading history, contamination incident records, and inspection reports when an Organization cancelled, the QR-code log page posted at that pool would stop resolving and the record a regulator expects to find would disappear. So we retain those records, and the reduced set of rows needed to display them, without a fixed end date.

We minimize that retained set to what the compliance log actually needs. Retention of the record is not a reason to retain the people attached to it, so when an Organization’s subscription ends we erase the personal contact information from the records we keep.

13.2 Exactly what is retained, and what is erased

Retained indefinitely:

• The compliance records themselves: water-reading logs, contamination incident records, incident monitoring readings, and inspection reports.
• Each body of water: its name, type, volume, equipment-independent details, and its public log identifier.
• Each property: its name, type, street address, city, state, postal code, and map coordinates. These appear on, or locate, the log itself.
• The customer’s name — the business or household name the Organization entered — which is the heading the log is published under.
• Each service visit: its date, the times recorded for it, and the readings, incidents, and reports attached to it.
• The Organization’s own business record — its name, plan, and billing identifiers — which is its account, not information about a customer.
• Customer portal logins (an End Customer’s name and email address), handled as set out in the table above, and deletable by the End Customer at any time.

Erased when the subscription ends, from records we otherwise keep:

• Every contact person on a property: the property manager, the on-site maintenance contact, the HOA manager, and, for a residential property, the owner — in each case their name, telephone numbers, and email address.
• The directions for physically reaching the pool, including any gate or access code, and the Organization’s free-text notes on the property.
• The Organization’s notes and billing reference for a customer.
• On every service visit: which technician performed it, their notes, and the GPS coordinates and accuracy recorded on arrival.

Deleted outright, on the 30-day schedule in the table above: visit photos, uploaded customer documents and safety data sheets, chemical dosage entries, checklists, issue flags, chemistry recommendations, equipment and volume records, service schedules, routes and route plans, technician pay rates and payroll settings, staff logins, management-company records, customer alerts, and all phone-agent call records, recordings, and transcripts.

The practical effect is that a retained compliance log identifies a property and the business that serviced it, and no longer identifies an individual person.

13.3 Legal and regulatory retention override

Where we retain information because a law, regulation, or health-department requirement calls for it — which is the basis for the compliance records above — that retention continues even after a request to delete, to the extent the law allows us to keep it. Most U.S. state privacy laws, including the CCPA as amended by the CPRA, permit a business or service provider to decline a deletion request to the extent retention is necessary to comply with a legal obligation. We rely on that only for the records described in Section 13.2, only for as long as the obligation applies, and only to the extent necessary — which is why the personal fields listed above are erased rather than retained alongside the log.

13.4 Asking us to delete a retained compliance record

A request is handled individually rather than refused by policy. If you are an individual and a retained record concerns you, or you are an Organization and believe a particular record should not be retained, contact us at privacy@aquarunner247.com with enough detail to find the record. We will:

1. Acknowledge the request, normally within 10 business days.
2. Identify the specific records involved and tell you what each one contains.
3. Delete anything not required to keep a regulatory log intact — including anything retained by mistake, and anything outside the categories in Section 13.2.
4. Where we cannot delete a record, tell you which record it is, the specific obligation we are relying on, and how long we expect it to apply, and consider whether the record can be reduced or pseudonymized further instead of kept as it is.
5. Where the record belongs to an Organization’s account as Customer Data, pass the request to that Organization and tell you we have done so, as described in Section 11 — they decide what their records contain, and we act on their instructions.

If you are in a state that provides a right to appeal a declined privacy request, Section 16 explains how to appeal, and that right applies to a refusal under this Section.

A residential property has no public compliance log — the log is published only for commercial bodies of water — so if your records concern a residential pool, tell us, because the regulatory basis above will usually not apply to them at all.

14. Security and Privacy Incidents

We use administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, authentication safeguards, encryption where appropriate, monitoring, backups, and workforce practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident involving Personal Information, we will investigate, take reasonable steps to contain and mitigate it, and provide notices as required by applicable law and our agreements. Where we process Customer Data as a Processor, we will notify the affected Customer in accordance with the applicable DPA or other agreement. Customers are responsible for notifying affected individuals or authorities when required of them by law.

15. Children’s Privacy

The Services are designed for business use and are not directed to children, including children under 13, and we do not knowingly collect Personal Information from children under 13. Individuals must be at least 18 years old, or the age of majority in their jurisdiction, to create an account or use the Services independently. A Customer must not knowingly direct a child to use the Services or submit a child’s Personal Information, except where lawful and necessary for a Customer’s business operations and with any required authorization. If you believe a child under 13 has provided us Personal Information, contact us and we will delete it.

If you believe a child’s Personal Information has been submitted to us without appropriate authorization, contact us at privacy@aquarunner247.com. We will take appropriate steps to review and address the matter.

16. U.S. State Privacy Rights

Depending on where you live, applicable law, and our relationship to your information, you may have rights to:

• Confirm whether we process your Personal Information and access or obtain a copy of it.
• Correct inaccurate Personal Information.
• Request deletion of Personal Information.
• Obtain certain information in a portable format.
• Opt out of certain processing, including sale, targeted advertising, or profiling that produces legal or similarly significant effects, where applicable.
• Limit certain uses or disclosures of sensitive Personal Information, where applicable.
• Withdraw consent where processing is based on consent.
• Appeal a decision denying a privacy request.

These rights apply only where and to the extent a qualifying state privacy law applies to our processing — for example, based on statutory revenue or data-volume thresholds — and are subject to the exceptions and limitations of that law. Where a law does not apply, the rights described in this section may not be available. These rights may also not apply to information we process solely as a Processor on behalf of a Customer. In that case, we may direct you to the relevant Customer or forward your request as appropriate.

California residents

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to our processing, California residents may have rights to know/access, delete, correct, opt out of the sale or sharing of Personal Information, limit certain uses and disclosures of sensitive Personal Information, and not be discriminated against for exercising applicable rights. California residents may also have rights to receive information about categories of Personal Information collected, sources, purposes, and categories of recipients.

The categories of Personal Information potentially collected are described in Section 4. We collect these categories from the sources described in Section 5 and use them for the purposes described in Section 6. We may disclose these categories to the recipient types described in Section 10. The precise categories collected, disclosed, sold, or shared during the applicable statutory period depend on the Services used.

California sale/share disclosure: AquaRunner247 has not sold Personal Information, and has not shared it for cross-context behavioral advertising, in the preceding 12 months.

Sensitive Personal Information disclosure: We collect one category of sensitive Personal Information: precise geolocation, in the form of the position fix that records a technician’s arrival at a service visit, and the coordinates of the properties on a route. Departure from a stop is determined on the device and recorded as a time only, so no departure position is transmitted to us or stored. We collect and use it only to perform the Services an Organization has engaged us for — recording that a visit happened, where, and when — and for the security and integrity of those records. We do not use or disclose precise geolocation to infer characteristics about anyone, and we do not sell or share it. Because our use is limited to purposes that applicable law permits without a right to limit, the right to limit the use of sensitive Personal Information does not currently apply; if that ever changes, we will update this Policy and provide a mechanism to exercise it.

Because we do not sell or share Personal Information, we do not offer a “Your Privacy Choices” opt-out link; there is nothing to opt out of. If that ever changes, we will add one and update this Policy before any sale or sharing begins. Where required, we will process recognized Global Privacy Control signals as an opt-out request for the browser or device transmitting the signal. We do not knowingly sell or share Personal Information of individuals under 16 years of age.

Virginia, Colorado, Connecticut, Utah, Texas, and other states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other states with applicable comprehensive privacy laws may have rights similar to those described above, subject to the requirements and exceptions of their state law. These rights may include access, correction, deletion, portability, and opting out of certain targeted advertising, sales, or profiling. The scope of available rights and how they apply may differ by state.

How to submit a request

Submit a privacy request by emailing privacy@aquarunner247.com with the subject line “Privacy Rights Request.” Tell us your state of residence, the right you wish to exercise, and how we can contact you. Do not include sensitive information in your request unless we specifically ask for it through a secure process.

We will take reasonable steps to verify your identity and authority before acting on a request. We may ask for information sufficient to verify your identity or account, but will not use verification information for unrelated purposes. If we cannot verify a request, we may be unable to fulfill it. An authorized agent may submit a request where permitted by law; we may require proof of the agent’s authority and may separately verify the individual.

We will respond within the period required by applicable law. If we deny a request, you may appeal by replying to our decision or emailing privacy@aquarunner247.com with the subject line “Privacy Request Appeal.” If we deny an appeal, we will provide information about any applicable complaint process or regulator where required by law.

We will not unlawfully discriminate against you for exercising privacy rights. We will not charge a fee for a request unless permitted by law, such as for a manifestly unfounded or excessive request.

17. Nevada Privacy Notice

Nevada residents may have a right under Nevada law to direct certain website operators not to sell covered information, as that term is defined under applicable Nevada law. To submit a request, email privacy@aquarunner247.com with the subject line “Nevada Privacy Request.” We will process the request as required by law. AquaRunner247 does not sell covered information.

18. Rights in the European Economic Area and United Kingdom

If the General Data Protection Regulation (“GDPR”) or UK GDPR applies to our processing, you may have rights, subject to applicable conditions and exceptions, to:

• Access your Personal Information and receive information about its processing.
• Correct inaccurate or incomplete Personal Information.
• Request erasure of Personal Information.
• Restrict processing.
• Receive certain information in a portable format or request its transfer to another organization.
• Object to processing based on legitimate interests or to direct marketing.
• Withdraw consent where processing is based on consent.
• Not be subject to certain decisions based solely on automated processing that produce legal or similarly significant effects, where applicable.

Our Services use automated features for operational functions, such as extracting information from documents, identifying potentially blurry images, and supporting workflow calculations. We do not intend to make decisions about individuals that produce legal or similarly significant effects solely through automated processing. Contact us if you believe this may apply to you.

To exercise a right, write to us at privacy@aquarunner247.com. If we process your information on behalf of a Customer, please contact that Customer, which is generally the Controller. You also have the right to lodge a complaint with your local supervisory authority, including in the country where you live, work, or believe an infringement occurred.

19. Marketing and Communication Choices

We may send service-related communications, such as account, billing, security, support, and operational notices. These communications are necessary to provide or administer the Services and may not be subject to marketing opt-out options.

Where permitted by law, we may send marketing communications about AquaRunner247 and our Services. You can opt out of marketing emails by using the unsubscribe link in the message or contacting us at privacy@aquarunner247.com. Opting out of marketing does not stop service-related communications.

We do not currently send text messages of any kind — marketing or transactional. All of our communication with you is by email, or by phone where you have asked us to call. If we introduce text messaging, we will obtain any consent the law requires before sending, support STOP to opt out and HELP for assistance, disclose that message and data rates may apply, and update this Policy first.

20. Third-Party Links and Services

The Services may link to third-party websites, apps, integrations, or services. Their privacy practices are governed by their own notices and terms, not this Policy. We are not responsible for third-party privacy practices. Review the applicable third-party privacy notice before providing information to that provider.

21. Do Not Track and Global Privacy Control

Some browsers offer a “Do Not Track” setting. Because there is no consistent industry standard for responding to Do Not Track signals, our website may not respond to them.

We do not permit third parties to collect information about your online activities over time and across different websites when you use our website or the Services. We use no advertising networks, no third-party advertising or social media pixels, and no cross-site tracking technologies.

Where required by applicable law, we will process a recognized Global Privacy Control or similar opt-out preference signal as a request to opt out of the sale or sharing of Personal Information or targeted advertising for the browser or device transmitting the signal. A signal may not identify you across devices or accounts; you may need to submit a separate request or sign in to apply a preference to an account where supported.

22. Changes to This Policy

We may update this Policy to reflect changes to our Services, information practices, or legal requirements. We will post the updated Policy on aquarunner247.com and revise the “Last Updated” date. If a change is material, we will provide additional notice by email, through the Services, or by another reasonable method where required by law. The updated Policy will apply from its stated effective date.

23. Contact Us

Questions, comments, and privacy requests may be sent to:

AquaRunner247 LLC, doing business as AquaRunner247
732 S 6th St, Ste N, Las Vegas, NV 89101
Privacy contact: privacy@aquarunner247.com
Website: https://aquarunner247.com

Version History

An organization’s recorded acceptance names the version it agreed to, so each version listed here remains available on request at admin@aquarunner247.com.

24. Attorney Review Notice

This document is informational and is not legal advice. It should be reviewed and completed by a licensed attorney before publication, including verification of the company’s actual data practices, applicable legal entity, privacy rights processes, cookie and tracking practices, sale/share status, retention periods, subprocessors, and transfer safeguards.