1. Introduction
Welcome to Work Stream Apps LLC ("Work Stream Apps LLC," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.
This policy applies to all information collected through our website at https://runfreeapps.com, and/or any related services, sales, marketing, or events (collectively, the "Services").
Work Stream Apps LLC is operated by Work Stream Apps LLC. By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our Services.
2. Information We Collect
2.1 Personal Data You Provide
We collect personal information that you voluntarily provide when registering for our Services. This includes:
- Account Information: Email address, password (encrypted), and business or organization name
- Google OAuth Data: If you choose to sign in or sign up using Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.
- Payment Information: When you purchase a Lifetime Pass, your payment is processed securely through Stripe. We do not store your credit card numbers, bank account details, or other financial information on our servers. Stripe handles all payment processing.
- Communications: Any messages, feedback, or support requests you send to us
2.2 Data Collected Automatically
When you visit our website, we may automatically collect certain information, including:
- Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
- Cookies: Essential cookies for authentication and session management. Analytics cookies are only set with your explicit consent.
- Device Information: Device type, screen resolution, and language preferences
3. How We Use Your Information
We use your personal data for the following purposes:
- Account Management: To create, maintain, and secure your account
- Service Delivery: To provide, operate, and maintain our app deployment platform
- Payment Processing: To process your one-time Lifetime Pass purchase via Stripe
- Communication: To send you service-related notifications, deployment status updates, and support responses
- Improvement: To understand how our Services are used and improve them (only with your consent for analytics cookies)
- Legal Compliance: To comply with legal obligations and protect our rights
4. Legal Basis for Processing (GDPR)
If you are a resident of the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific context:
- Contractual Necessity: Processing your account data to provide you with our Services
- Consent: Where you have given us explicit consent (e.g., for analytics cookies, marketing emails)
- Legitimate Interests: To improve our Services, prevent fraud, and ensure security
- Legal Obligations: To comply with applicable laws and regulations
5. Data Sharing & Third Parties
We do not sell your personal data. We share your data only with:
- Google (OAuth Authentication): If you choose to sign in with Google, your authentication is handled through Google's OAuth 2.0 service. Google provides us with your name, email address, and profile picture. We do not share any of your data back with Google beyond what is required for the authentication process. See Google's Privacy Policy.
- Stripe: Our payment processor, which handles all financial transactions securely. See Stripe's Privacy Policy.
- Cloud Hosting Providers: Your deployed apps run on your own cloud accounts (e.g., DigitalOcean). We facilitate the connection but do not access your cloud data.
- Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation.
6. Cookies & Tracking Technologies
We use the following types of cookies:
| Type | Purpose | Required? |
|---|
| Essential | Authentication, session management, security | Yes |
| Analytics | Understanding how users interact with our site | No (consent required) |
You can manage your cookie preferences at any time through the cookie consent banner or your browser settings.
7. Your Rights Under GDPR
If you are located in the EEA, you have the following data protection rights:
- Right of Access: You can request a copy of the personal data we hold about you. Use the "Export My Data" feature in your dashboard settings.
- Right to Rectification: You can update or correct your personal data through your account settings.
- Right to Erasure ("Right to be Forgotten"): You can request deletion of your account and all associated data. Use the "Delete My Account" feature in your dashboard settings.
- Right to Restrict Processing: You can ask us to limit the processing of your data.
- Right to Data Portability: You can request your data in a commonly used, machine-readable format (JSON).
- Right to Object: You can object to our processing of your personal data for certain purposes.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at [email protected] or use the self-service tools in your account dashboard.
8. Data Retention
We retain your personal data only for as long as necessary to provide our Services and fulfill the purposes described in this policy. When you delete your account, we will delete or anonymize your personal data within 30 days, unless we are legally required to retain certain information.
9. Data Security
We implement appropriate technical and organizational security measures to protect your personal data, including:
- HTTPS/TLS encryption for all data in transit
- Password hashing using argon2 (industry-standard algorithm)
- Payment data handled exclusively by PCI-compliant Stripe
- Regular security reviews and access controls
10. International Data Transfers
Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from your country. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.
11. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.