Privacy policy

1. Who we are and who this covers

Orrun LLC, a Texas limited liability company ("Orrun," "we," "us"), provides prospect intelligence services to businesses: audiences, data enrichment, website visitor identification, intent signals and direct mail. This policy explains how we collect, use and disclose personal information in two roles:

• Website and customer information. Information about people who visit orrun.ai, request a demo, or work with us as customers or vendors.
• Platform information. Information about U.S. consumers and business professionals that we obtain from third-party sources and make available to our business customers.

Orrun serves customers in the United States, and our services concern U.S. residents. This website and our services are not directed to people outside the United States, and this policy is written for U.S. residents.

2. Information from our website and customers

• Information you give us: name, work email, phone, company, role, industry and anything you include in a message when you request a demo, contact us or submit a privacy request.
• Usage information: we use Plausible Analytics, which measures aggregate site traffic (pages viewed, referring site, device type and approximate country) without cookies and without identifying you. Our hosting provider, Netlify, keeps standard server logs, including IP addresses, for security and operations.
• Customer account information: contact, billing and contract details for the businesses we work with, and the files and lists customers provide to us, such as their own customer and suppression lists.

We do not sell or share information collected through this website for targeted advertising.

3. Information in the Orrun platform

Sources. Platform information comes from licensed third-party data providers, including providers of consumer and business marketing data and online intent signals; publicly available records, such as property records; and, for website visitor identification, from the websites of our customers that choose to use that service. Customers who use visitor identification are responsible for providing any notices their own website visitors are owed.

Categories. Depending on the record, platform information may include:

• Identifiers and contact details: name, postal address, email address, phone number and online or device identifiers.
• Demographic and household information: age range, household composition, homeownership, length of residence and education.
• Property information: home value range, property characteristics and ownership records.
• Inferred economic indicators: estimated income, home value and net-worth ranges. These are modeled estimates, not verified financial information.
• Professional information: job title, seniority, employer, industry and company size.
• Interests and purchase behavior: lifestyle interests, affinities and general purchasing patterns.
• Online activity and intent signals: indications that a person or business has been researching a topic, and for website visitor identification, the pages of a customer's website that were visited.
• Inferences: scores or segments derived from the information above, such as likelihood to be interested in a category.

What we do not do. We do not use sensitive personal information, such as health conditions, racial or ethnic origin, religious beliefs, sexual orientation, precise geolocation, Social Security or financial account numbers, or citizenship status, to build audiences or targeting segments. We do not knowingly sell or share personal information of anyone under 16, and we do not verify or label anyone as an accredited investor.

4. How we use information

• To provide our services: building audiences, enriching and scoring customer records, identifying website visitors, delivering intent signals and producing direct mail.
• To apply suppression, including honoring opt-outs and customer do-not-contact lists.
• To respond to inquiries, run demos and manage customer relationships.
• To maintain, secure and improve our services, and to prevent fraud and misuse.
• To comply with law and enforce our agreements.

5. How we disclose information

• Business customers. We provide platform information to business customers for their marketing, prospecting and data hygiene. Under several state laws this is considered a "sale" of personal information, and in some cases "sharing" for targeted advertising. You can opt out at any time (Section 7). Customers must use the information lawfully and may not use it to make decisions about credit, employment, insurance, housing or similar eligibility. Orrun is not a consumer reporting agency, and our data is not a consumer report.
• Advertising platforms. At a customer's direction, we send audiences to advertising platforms, such as social, search and programmatic networks, to show ads.
• Service providers. We use vendors for hosting (Netlify), email (Google Workspace), analytics (Plausible), data processing and print-and-mail fulfillment. They may use information only to provide services to us.
• Legal and corporate. We may disclose information to comply with law or legal process, to protect rights and safety, or in connection with a merger, acquisition or sale of assets.

6. Your privacy rights

Depending on your state of residence, you may have the right to:

• Know and access the personal information we hold about you, and receive a portable copy.
• Correct inaccurate personal information.
• Delete personal information we hold about you.
• Opt out of the sale of your personal information, its use or sharing for targeted advertising, and profiling that produces legal or similarly significant effects.
• Appeal our decision on your request.

We extend these rights to all U.S. residents, regardless of whether their state has a privacy law. We will not discriminate against you for exercising them.

7. How to make a request

• Online: use our privacy request form.
• Email: privacy@orrun.ai.
• Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and targeted advertising for the browser and any information we can associate with it.

Verification. Opt-out requests do not require verification. For access, correction and deletion, we will ask for enough information to match you to our records, such as your name, postal address and email, and will use it only to verify and complete your request.

Authorized agents. An agent may submit a request for you with your signed permission. We may ask you to confirm your identity directly.

Timing. We respond within 45 days, and may extend once by an additional 45 days when reasonably necessary, with notice.

Appeals. If we decline your request, you may appeal by emailing privacy@orrun.ai with "Appeal" in the subject line. We respond within the time your state's law requires. If you disagree with the outcome, you may contact your state attorney general.

Suppression. When you opt out or ask us to delete your information, we keep a minimal record of the request so that your information is not added back from our data sources.

8. Additional notice for California residents

In the past 12 months, we have collected the categories of personal information described in Sections 2 and 3, which correspond to these California categories: identifiers; customer records; characteristics of protected classifications (age only); commercial information; internet or other electronic network activity; professional or employment-related information; and inferences. We have sold or shared identifiers, commercial information, internet activity, professional information and inferences to business customers and advertising platforms, and disclosed all categories to service providers for business purposes. We retain information as described in Section 10.

California residents may also submit a deletion request to all registered data brokers at once through the California Privacy Protection Agency's Delete Request and Opt-out Platform (DROP) at privacy.ca.gov.

We do not use or disclose sensitive personal information for purposes that would require offering a right to limit under California law.

9. Data broker notice

Orrun is a data broker. We obtain personal information about consumers from sources other than the consumers themselves and provide it to businesses. Where state law requires, we register as a data broker, including with the California Privacy Protection Agency and the Texas Secretary of State.

10. Security, retention, children and changes

Security. We maintain administrative, technical and physical safeguards designed to protect personal information, and require our service providers to do the same. No system is perfectly secure.

Retention. We keep website and customer information for as long as needed for the purposes above and our legal obligations. We refresh platform information regularly, remove records that are outdated or no longer licensed, and keep opt-out and deletion records indefinitely so we can keep honoring them.

Children. Our website and services are not directed to children, and we do not knowingly collect personal information from children under 13.

Changes. We will update this policy as our practices or the law change, and post the new effective date at the top. We review it at least once a year.

11. Contact us

Orrun LLC
A Texas limited liability company
Dallas–Fort Worth, Texas
Privacy requests and questions: privacy@orrun.ai
General inquiries: hello@orrun.ai