Run Merchant Sync privacy policy

Last updated: October 22, 2026.

Run Payments LLC ("Run Payments," "we," "us") operates Run Merchant Sync (the "App"), a Clover App Market application that synchronizes payment transaction data from a merchant's Clover account to Run Payments reporting. This policy explains what data we collect, how we use and share it, and the rights available to merchants and to the individuals whose data is processed. This policy is not a substitute for a merchant's own privacy policy.

1. Data We Collect

When a merchant installs the App, we collect and store the following from the merchant's Clover account:

Merchant account information — the Clover merchant ID, business name, and the Run Payments merchant ID the account is linked to.
OAuth credentials — the access and refresh tokens Clover issues to the App on the merchant's behalf. They allow us to retrieve payment records and, when the merchant requests it, to void or refund payments. They are stored encrypted at rest and never shared with third parties.
Payment transaction data — payment amounts, dates, status, card brand, masked card number (first 6 and last 4 digits only), card expiration date, cardholder name, authorization codes, and address verification (AVS) result codes. We do not receive or store full card numbers or CVV codes.
Customer information attached to a sale — when the merchant adds a customer to a sale in Clover, that customer's name, email address, phone number, and postal address.

2. How We Use Your Data

We use the data described above solely to:

Display the merchant's Clover transactions inside Run Payments reporting dashboards.
Reconcile payment activity across the merchant's connected payment processors.
Void or refund payments when the merchant requests it through Run Payments.
Provide customer support, maintain the security of the App, and comply with legal obligations.

We do not use this data for our own marketing, and we do not sell or rent it.

We share data only:

With the merchant whose account the data came from.
With Clover, as the merchant's point-of-sale platform, to perform actions the merchant requests (such as a void or refund). Clover's handling of data is described in the Clover Privacy Notice.
With service providers that host and operate the App on our behalf (Amazon Web Services and Oracle Cloud Infrastructure), under contracts that restrict their use of the data.
When required by law or legal process, or in connection with a merger, acquisition, or sale of assets, subject to this policy.

4. Sale of Personal Information

We do not sell, as defined under the California Consumer Privacy Act ("CCPA"), personal information to third parties. In the preceding twelve (12) months, we have not sold any personal information.

5. Data Storage and Security

Transaction and credential data is stored in a private Oracle Autonomous Database hosted on Oracle Cloud Infrastructure, and the App runs on Amazon Web Services. Access is restricted to Run Payments systems and personnel. All connections use TLS encryption in transit. OAuth tokens are stored only in that database, with access controls limiting read access to the App's service.

6. Data Retention

Transaction data is retained for as long as the merchant's Run Payments account is active. When a merchant uninstalls the App, its OAuth tokens are revoked immediately. A merchant may request deletion of all stored transaction data as described in Section 8.

7. Your Rights and Choices

The App processes data on behalf of the merchant. If you are a customer of a merchant that uses the App, please contact that merchant about its use of your information. Where Clover is responsible for your information, you may contact Clover as described in the Clover Privacy Notice. We will assist the merchant, or Clover, as applicable, in responding to your request.

Merchants may at any time request access to, correction of, or deletion of the data we hold about their business or their customers, by emailing support@runpayments.io or calling 1-800-500-5065. To update customer or payment data that has already synced, contact us and we will correct it.

You may also make a complaint about our handling of your information using the contact details in Section 10.

8. Your California Privacy Rights

If you are a California resident, the CCPA gives you the following rights with respect to your personal information. These rights are not absolute, and we may decline a request as permitted by the CCPA.

Right to information. You may request, for the preceding twelve (12) months: the categories of personal information we collected about you; the categories of sources it was collected from; the business purposes for collecting it; the categories of third parties with whom we shared it; the categories disclosed for a business purpose; and whether we sold any of it.
Right to access. You may request a copy of the personal information we hold about you.
Right to deletion. You may request that we delete the personal information we collected from you, subject to exceptions permitted by law.
Right to nondiscrimination. We will not discriminate against you for exercising any of these rights.

Categories of personal information

Identifiers (name, email address, phone number, postal address) — Collected: Yes. Shared for a business purpose: Yes, with our service providers and Clover, as described in Section 3.
Commercial information (payment transaction records) — Collected: Yes. Shared for a business purpose: Yes, with our service providers and Clover, as described in Section 3.
Financial information (masked card number, card expiration, cardholder name) — Collected: Yes. Shared for a business purpose: Yes, with our service providers and Clover, as described in Section 3.
Online identifiers — Collected: No. Shared for a business purpose: No.
Protected classification characteristics — Collected: No. Shared for a business purpose: No.
Biometric information — Collected: No. Shared for a business purpose: No.
Internet or other network activity — Collected: No. Shared for a business purpose: No.
Geolocation data — Collected: No. Shared for a business purpose: No.
Sensory data — Collected: No. Shared for a business purpose: No.
Professional or employment information — Collected: No. Shared for a business purpose: No.
Education information — Collected: No. Shared for a business purpose: No.
Medical information — Collected: No. Shared for a business purpose: No.
Inferences drawn from the above — Collected: No. Shared for a business purpose: No.

Personal information is collected from the merchant's Clover account and used only for the purposes in Section 2.

Right to information, access and deletion: how to exercise your rights

To make a request, call us toll-free at 1-800-500-5065 or email support@runpayments.io.

The CCPA requires us to verify your identity before we respond substantively. Your request must include enough detail for us to understand, evaluate, and respond to it, and enough information for us to reasonably verify that you are the person whose personal information we collected (or that person's authorized representative). You may make a request on behalf of your child under 13.

You may use an authorized agent to make a request for you. We may require written authorization confirming the agent's authority to act on your behalf, and may ask you to verify your identity directly.

We will respond to a verifiable request within 45 days, as the CCPA requires. If we need more time, we will tell you why and how much longer we need.

9. Changes to This Policy

We may update this policy from time to time. We will update the "Last updated" date above, and material changes will be communicated via email to the address associated with the merchant's Run Payments account. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

10. Contact

Run Payments LLC
1008 Upper Gulph Rd, Suite 300, Wayne, PA 19087
support@runpayments.io
1-800-500-5065