Privacy Policy
Last updated: January 2025. This policy explains how Display-Power ("we", "us", "run-done") collects and processes your data.
1. Data Controller
Company: Display-Power
Address: 86-90 Paul Street, Hackney, London EC2A 4NE, UK
Contact: privacy@run-done.com
2. Data We Collect
We collect the following types of data:
- Account data: Email, name, company details when you register
- Payment data: Processed securely by Stripe; we don't store card numbers
- Usage data: How you interact with our service for improvement purposes
- Tax documents: Data you upload for processing (encrypted, temporary storage)
3. How We Use Your Data
- To provide and maintain our tax automation services
- To process payments and send invoices
- To communicate service updates and support
- To comply with legal obligations
4. Data Sharing
We share data only with:
- Stripe: Payment processing
- Ukrainian tax authorities (ДПС): Only the tax documents you authorize us to submit
- Google (Ads, Analytics): measuring the performance of our own advertising. We run Google Ads and Google Analytics on run-done.com; our in-house tool reads only aggregated statistics of our own advertising account through the Google Ads API and sends no customer personal data to it. Details are on our Google Ads API page.
- Meta (Instagram): Instagram Direct messages sent to a business account that its owner connected to run-done through the Instagram API. We receive them from Meta and send nothing back to Meta except the replies the account owner chooses to send.
- Legal requirements: When required by law
Instagram messages
When the owner of an Instagram business account connects it to run-done (the «Beseda» inbox), Meta forwards to us the messages that arrive at that account.
- What data: message text and time, the sender's Instagram-scoped ID (IGSID), links to attachments (photos, videos, reels), reactions and read receipts; the public username when Meta provides it.
- Why: only to show these messages to the account owner in their inbox and let them reply. We do not use them for advertising, profiling or model training.
- Who we share with: no one. Only the owner of the connected account and the people they grant access to can see the data.
- Retention: while the account stays connected. After disconnection or a deletion request the data is deleted within 30 days.
Data deletion
You can ask us to delete your data at any time, including Instagram messages you sent to a business account connected to run-done.
- Email privacy@run-done.com
- Include your Instagram username (or your run-done account email) and what you want deleted.
- We delete the data within 30 days and confirm by email.
A business account owner can also disconnect run-done in Instagram: Settings → Apps and websites → run-done → Remove. After that no new messages reach us and stored ones are deleted within 30 days.
5. Data Security
We use encryption (TLS/SSL), secure servers, and access controls to protect your data. Digital signatures and keys are processed securely and not stored permanently.
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request data deletion
- Withdraw consent
- Data portability
Contact us at privacy@run-done.com to exercise these rights.
7. Cookies
We use essential cookies for authentication and session management. Analytics cookies are used only with your consent to improve service quality.
8. Contact
This policy may be updated. Check this page for the latest version.