Privacy Policy
What data RunScale stores, what we never ask for, who else processes it, and how to request a copy or a deletion.
We store your email, your orders and your wallet movements. We never ask for your social account password, and we do not run advertising trackers.
1. What we collect
- Account data — email address and a hashed password. We never store passwords in plain text.
- Order data — the service ordered, quantity, target link, order status and timestamps.
- Wallet data — deposits, spending, refunds and payout records, kept for financial reconciliation.
- Support data — anything you send through the contact form or Telegram, including your Order ID and screenshots.
- Technical data — a truncated or hashed IP address used for rate limiting and abuse prevention, plus the basic request logs produced by our CDN and reverse proxy.
2. What we never collect
- Social account passwords, admin rights, API keys or session tokens. No RunScale service requires them and no RunScale staff will ask for them.
- Card numbers or bank details. Crypto payments are handled entirely by the payment gateway; we receive a confirmation, not your wallet keys.
3. How we use your data
- To dispatch and track your orders, and to handle refill and refund claims.
- To keep the panel secure: rate limiting, fraud checks and abuse prevention.
- To meet accounting and tax record-keeping obligations.
- To answer your support requests.
We do not sell your personal data.
4. Who else processes it
- Payment gateways — process the crypto payment and return a confirmation.
- Our CDN and reverse proxy — terminate TLS, mitigate attacks and produce access logs.
- Telegram — order and support notifications are delivered to our staff through a Telegram bot.
- The execution network — receives only what an order needs: the target link and the quantity. It does not receive your email or your password.
5. Cookies
We use a session cookie to keep you signed in, plus a small amount of local storage for interface preferences. We do not run advertising or cross-site tracking pixels, so there is nothing to opt out of beyond clearing your browser data.
6. How long we keep it
- Orders and wallet transactions: retained for accounting and dispute resolution.
- Contact form messages: retained for up to 12 months.
- Server and CDN logs: rotated on the retention schedule of those providers.
7. Your rights
You can ask us for a copy of the data tied to your account, ask us to correct it, or ask us to delete the account and everything that is not required for accounting or legal record-keeping. Send the request from the email address on the account through the contact form or Telegram support, and we will act on it within 30 days.
8. Security
All traffic is served over HTTPS. Passwords are stored hashed, never in plain text. Access to operational systems is limited to staff who need it. No system is perfectly secure, so if you believe your account has been compromised, contact us immediately and we will lock it.
9. Changes to this policy
Material changes will be reflected in the revision date at the top of this page. Where a change affects how we handle your personal data, we will also post a notice in our Telegram channel.