Privacy Policy Real Talk with Andres & Heather, LLC (DBA RunMyCRM)

Effective Date: May 13, 2026

Last Updated: May 13, 2026

SMS Communications & Mobile Messaging

By providing your mobile phone number and opting into SMS communications from Real Talk with Andres & Heather, LLC (DBA RunMyCRM), you consent to receive customer care, support, appointment reminders, onboarding communications, account notifications, and other service-related messages.

Message frequency may vary based on your interactions with our services. Message and data rates may apply according to your mobile carrier plan.

You may opt out of SMS communications at any time by replying STOP to any message. For assistance, reply HELP or contact [[email protected]](mailto:[email protected]).

SMS Consent & Data Sharing

SMS opt-in and phone numbers collected for SMS communications are not shared with any third parties or affiliates for marketing purposes.

No mobile information will be sold, rented, leased, transferred, shared, or otherwise disclosed to third parties for promotional or marketing purposes.

Information may only be shared with messaging providers, carriers, or service providers strictly necessary to deliver SMS communications and operate our services.

Cookies & Tracking Technologies

Our websites, applications, and services may use cookies, pixels, analytics tools, and similar technologies to improve website functionality, understand user behavior, measure performance, maintain security, and enhance the user experience.

These technologies may collect browser type, device information, pages visited, referral sources, session information, and usage statistics.

Users may disable cookies through browser settings, although some features of the website may not function properly if cookies are disabled.

1. Who We Are Glitch is an AI-powered operator that lives inside GoHighLevel (GHL) sub-accounts. It helps agency owners manage their CRM through Telegram chat and embedded iframe specialists. Glitch is built and operated by Real Talk HA, doing business as RunMyCRM. When this policy says "we," "us," or "our," it means Real Talk HA. When it says "you" or "your," it means the agency owner or authorized user who installs and uses Glitch

2. What Data We Collect When you connect Glitch to your GHL sub-account, we collect and process the following categories of data: Account & Authentication Data - Your GHL location ID - OAuth tokens (access and refresh) required to operate within your sub-account CRM Contact Data (read and write access) - Contact names, email addresses, phone numbers - Tags, custom fields, and notes associated with contacts Custom Values - Data stored in your GHL Custom Values (used as a knowledge base for your account) — read and write access Conversation History - Messages exchanged between you and the Glitch bots (Telegram and iframe chat) Stored in our database, capped at 80 messages per chat thread - Encrypted at rest Usage Metrics - LLM token counts and model spend per tenant (tracked for billing and fair-use purposes via OpenRouter)

3. What We Do NOT Collect We want to be clear about data we never collect: Payment or billing information — we do not process credit cards or bank details directly Biometric data — no fingerprints, face scans, or voice prints Precise location or GPS data Third-party tracking pixels or advertising IDs Data from GHL sub-accounts you have not explicitly connected

4. How We Use Your Data We use the data listed above for these purposes only: Operating Glitch — reading and writing CRM data on your behalf when you issue commands via chat Providing AI responses — sending relevant context to language models so Glitch can answer your questions and execute tasks accurately Generating media — using image or video generation services when you request creative assets Research tasks — performing web scraping when you ask Glitch to research a topic Maintaining conversation context — storing recent chat history so Glitch remembers what you discussed Monitoring usage — tracking token consumption and model costs to manage fair use and billing Improving reliability — diagnosing errors and improving system performance (we do not use your CRM data to train AI models

5. How We Share Your Data We do not sell your data. We share it only with the sub-processors required to deliver the service: Sub-Processor Purpose OpenRouter LLM inference routing Location US Anthropic Claude language models (via OpenRouter) US Replicate Image and video generation US Apify Web scraping for research tasks EU/US MongoDB Atlas Database storage (encrypted at rest) US-East DigitalOcean Server hosting US Vercel Chat web application hosting US Telegram Bot messaging platform Global GoHighLevel The CRM platform Glitch operates within US Each sub-processor is used only for the purpose listed. We do not share your CRM contact data with any sub-processor except as necessary to fulfill a specific command you initiate (for example, sending contact context to a language model when you ask Glitch a question about a contact)

6. Data Storage & Security Encryption at rest: Conversation history and OAuth tokens are encrypted at rest in MongoDB Atlas. Encryption in transit: All data transmitted between your browser, Telegram, our servers, and sub processors travels over TLS (HTTPS). Access controls: OAuth tokens are scoped to the specific GHL sub-account you authorize. Only the Glitch system accesses them — no human operator views your tokens or CRM data in the normal course of business. Conversation cap: Chat history is capped at 80 messages per thread. Older messages are automatically pruned. Infrastructure: Servers are hosted on DigitalOcean (US) with standard security practices including firewalls, SSH key authentication, and regular updates.

7. Data Retention CRM data: We access your GHL contact records in real time via OAuth. We do not maintain a persistent copy of your full contact database. Contextual snippets may be temporarily cached during a chat session. Conversation history: Retained for as long as your account is active, subject to the 80-message cap per thread. OAuth tokens: Retained for as long as Glitch is installed in your sub-account. Tokens are revoked and deleted when you uninstall the app. Usage metrics: Retained for billing and audit purposes for up to 12 months after account closure.

8. Your Rights You have the following rights regarding your data: Access You can request a summary of the data we hold about you and your sub-account at any time by emailing us. Deletion - You can ask us to delete specific contacts or conversation threads at any time. - Upon uninstalling Glitch from your GHL sub-account, we will delete all associated data (OAuth tokens, conversation history, usage records, and any cached contact data) within 30 days. Data Portability You can request an export of your contact data in CSV format by emailing us. Correction If any data we hold is inaccurate, let us know and we will correct or delete it promptly. To exercise any of these rights, email [email protected] with the subject line "Privacy Request" and include your GHL location ID so we can locate your account.

9. Third-Party Links & Services Glitch may surface links to external websites during research tasks. We are not responsible for the privacy practices of those third-party sites. We encourage you to review their privacy policies independently.

10. Children's Privacy Glitch is a business tool designed for agency owners and CRM operators. It is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

11. Changes to This Policy We may update this Privacy Policy from time to time. When we make material changes, we will notify you via Telegram (if your bot is connected) or by posting a notice in the Glitch dashboard. The "Effective Date" at the top of this page will always reflect the latest revision.

12. Contact Us If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, reach us at: Real Talk HA (DBA RunMyCRM) Email: [email protected] Subject line: "Privacy Policy — Glitch" We aim to respond to all privacy-related inquiries within 5 business days.

13. Contact Information If you have questions about the privacy policy, please contact us:

Real Talk with Andres & Heather, LLC (DBA RunMyCRM)

Email: [email protected]