Privacy Policy

RunPayway™

Effective Date: August 4, 2026

Operated by PeopleStar Enterprises, Inc.

24312 Airporter Way
Laguna Niguel, California 92677
United States

PeopleStar Enterprises, Inc. is the data controller for organization account information and for the accounts of authorized organizational users. Where an organization uses RunPayway™ to establish a requested financial fact for a person it serves, the organization determines the purpose of that processing and PeopleStar Enterprises, Inc. acts as a processor on the organization's instructions.

Privacy inquiries and privacy rights requests may be submitted through the RunPayway™ privacy request form.

1.Overview

This Privacy Policy describes how RunPayway™ handles information in connection with the RunPayway™ service and the public website.

This policy applies to information handled through:

• the RunPayway™ public website
• the public demonstration, which is not stored
• sign-in for organizations and their authorized staff
• the protected organizational workspace and the governed records it holds
• inquiry and contact form submissions
• the endpoint that runs the RunPayway™ governed method

RunPayway™ handles only the information needed to perform the governed evaluation an organization requested and to operate the service for the organization that purchased it. RunPayway™ does not approve loans, recommend lenders, replace underwriting, or make the organization's final decision.

2.Information Handled

RunPayway™ may handle the following categories of information:

• Organization information: the organization name and the record identifier the service assigns to it
• Authorized user information: work email address, display name, staff role, and a password credential stored only as a salted hash
• Subject references: the organization's own reference for the person a request is about, together with any external case reference or source-system reference the organization chooses to attach
• Request inputs: the financial fact and threshold requested, and, where a governed evaluation is run on figures supplied by staff, the proposed terms, income structure, recurring obligations, financial margin, and the evidence status of each figure entered
• Technical information: IP address, device type, and browser type
• Usage and session data: timestamps, session identifiers, routing data, and error logs

The public demonstration on this website runs in the browser and on its endpoint only. It is not written to storage and is not associated with any account. Records created inside an organization's workspace are stored and are owned by that organization. RunPayway™ does not require the name of the person a request is about. An organization may use a case reference instead.

Certain technical information may be collected automatically during use of the RunPayway™ service, including:

• IP address
• device type
• browser type
• timestamps
• session identifiers
• routing data
• error logs

This information supports service security, abuse prevention, and operational integrity.

RunPayway™ does not connect to bank accounts, credit bureaus, payroll providers, or lender systems. It has no such integration.

RunPayway™ does not collect bank credentials, account numbers, credit reports, credit scores, transaction history, or government identification numbers.

Figures entered for a request are the figures the organization's staff record from the documentation in front of them.

3.Purpose of Processing

Information may be used to:

• run the RunPayway™ methodology against the figures and evidence a staff member enters
• return a completed result, or a refusal naming what is unresolved where required evidence is missing
• store the result as a record owned by the organization that created it
• show an organization its own record history and reopen its own records
• authenticate authorized users and confirm their membership of an organization
• keep one organization's records separate from every other organization's records
• respond to inquiries and contact form submissions
• maintain service integrity and security
• comply with legal obligations

RunPayway™ does not sell personal information for monetary consideration and does not share personal information for cross-context behavioral advertising. For users in the European Economic Area, the legal bases for processing are: (a) performance of a contract, to provide the service to the organization; (b) legitimate interest, to maintain service security, prevent abuse, and improve reliability; (c) consent, where you voluntarily submit an inquiry; and (d) legal obligation, where required by applicable law.

4.Service Providers and Data Sharing

RunPayway™ may share information with service providers that perform operational services on our behalf. The categories are:

• hosting infrastructure
• network and content delivery
• security monitoring
• communications relating to inquiries you submit

These providers process information solely to support the operation of RunPayway™ and are restricted from using it for their own purposes. An organization may request the current list of providers used for its deployment through the privacy request form. RunPayway™ does not share an organization's records with any other organization.

5.Contact Following a Submission

If you submit an inquiry, request organizational information, or are given an account by an organization that uses RunPayway™, you may be contacted in response to that submission or about the operation of the service.

Contact may relate to:

• account setup and access
• service-related and security-related notices
• organizational or partnership discussions you initiated
• responses to questions you asked

Such communication is limited to responding to your submission and administering the requested service.

Optional communications, if offered separately, will include an opt-out mechanism.

RunPayway™ does not market loan products and does not contact an organization's members or clients.

6.Data Retention

Information is retained only for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer period is required or permitted by law.

Anything run through the public demonstration is not stored at all. There is no record to retain and none is created.

Records created inside an organization's workspace are retained for that organization until the organization or PeopleStar Enterprises, Inc. deletes them, or until the organization's use of the service ends.

No fixed retention period is published for organizational records at this stage of deployment. An organization may request deletion of its records through the privacy request form.

7.Data Security

RunPayway™ implements administrative, technical, and organizational safeguards designed to protect the information it handles. Sign-in is required before any organizational record can be reached, passwords are stored only as salted hashes and never in readable form, sessions are validated on the server and expire, and every read and write of a record is limited on the server to the organization the signed-in user belongs to.

No method of transmission over the Internet or electronic storage can guarantee absolute security, and this description is not a warranty. RunPayway™ has not completed an independent security audit or certification.

8.Organizational Records and Separation

Each record is owned by exactly one organization.

A record may contain:

• the organization that owns it
• the staff member who created it
• the organization's own reference for the person the record is about, and any external case reference
• the financial fact and threshold requested, and the figures and evidence status recorded for it
• the result, the method version, and the times the record was created and updated

A signed-in user cannot reach a record outside their own organization. RunPayway™ does not publish:

• any organization's records
• any reference to a person a record is about
• any figure entered for a request

9.Privacy Rights

Depending on your jurisdiction, you may have the right to:

• request access to personal information
• request correction of inaccurate personal information
• request deletion of personal information
• request limitation of processing
• request data portability, meaning your personal data in a structured, commonly used, and machine-readable format
• request restriction of processing of your personal data
• object to processing based on legitimate interest

Privacy rights requests may be submitted through the RunPayway™ privacy request form available on this website. If you are the person a record is about and an organization that uses RunPayway™ holds it, the organization holds the record and your request is directed to that organization. RunPayway™ will assist the organization in responding.

Identity verification may be required before a request is processed.

Verified requests will be responded to within applicable legal timeframes.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority.

10.California Privacy Notice

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• the right to know what personal information is collected
• the right to request deletion
• the right to request correction
• the right to opt out of the sale or sharing of personal information
• the right to non-discrimination
• the right to limit the use and disclosure of sensitive personal information

RunPayway™ does not sell personal information and does not share personal information for cross-context behavioral advertising.

RunPayway™ does not collect Social Security numbers, financial account credentials, precise geolocation, or biometric data.

Requests must be submitted through the RunPayway™ privacy request form available on this website.

11.Cookies and Session Storage

RunPayway™ uses cookies and similar technologies for:

• sign-in and session authentication
• security
• service functionality
• language preference

The session cookie set at sign-in is required for the protected workspace to work. It is restricted to the site, is not readable by page scripts, and expires.

RunPayway™ does not use cookies for behavioral advertising.

Users may control cookies through their browser settings. Disabling cookies will prevent sign-in from working. Where required by applicable law, RunPayway™ will obtain consent before placing non-essential cookies.

RunPayway™ does not respond to browser "Do Not Track" signals.

12.Children's Privacy

RunPayway™ is not intended for individuals under 18 years of age.

RunPayway™ does not knowingly collect personal information from minors.

13.International Users

RunPayway™ operates from the United States.

Information may be processed and stored in the United States and may be subject to U.S. law.

For users in the European Economic Area, transfers of personal data to the United States are conducted in reliance on Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards as required under applicable data protection law.

14.Data Protection Contact

For privacy inquiries or to exercise your data protection rights, contact us through the RunPayway™ privacy request form or by email at privacy@peoplestar.com.

PeopleStar Enterprises, Inc. is responsible for the information described in this policy. A formal Data Protection Officer appointment is planned. In the interim, privacy inquiries are handled by the privacy team at privacy@peoplestar.com.

15.Automated Decision-Making

A RunPayway™ evaluation is started by a staff member, uses the evidence and figures recorded for that request, and returns either a completed result or a refusal naming what is unresolved where required evidence is missing.

The result is information for the organization. It is not a loan approval, a denial, or an automated decision producing legal or similarly significant effects. The organization makes its own decision through its own process.

16.Changes to This Policy

This Privacy Policy may be updated periodically.

Material changes will be published with an updated effective date.