Privacy Policy
Who we are: RossmanCX LLC, a Colorado limited liability company (“RossmanCX,” “we,” “us”). This policy covers rossmancx.com, m1dge.com, and the M1dge platform.
We believe privacy policies should be readable. This one tells you exactly what we collect, why, who touches it, and how to make us stop.
What we collect
If you visit our websites: Anonymous usage analytics via Cloudflare Web Analytics — no cookies, no cross-site tracking, no personal profiles. If you contact us (email or contact form), we receive what you send: your name, email, and message. If you book time with us through Calendly (where enabled), Calendly collects your name, email, and scheduling details under its own privacy policy.
If you are a business using M1dge: Your business contact information, account credentials, configuration choices, and the operational data you run through the platform (customer records, quotes, schedules, messages, invoices).
If you are a customer of a business that uses M1dge: That business — not RossmanCX — is who you’re dealing with. We process your information (name, contact details, service requests, messages, appointment and payment records) on that business’s behalf to run their front office. Requests about your data should go to that business first; we help them respond. For this data, RossmanCX acts as a service provider under the California Consumer Privacy Act and a processor under the Colorado Privacy Act, and uses it only to run the front office for that business.
What we never collect: We don’t buy data about you, we don’t track you across the web, and we never store full payment card numbers — payments are processed by Square.
How we use it
To operate the services: answering inquiries, generating quotes, scheduling, invoicing, and sending the messages you’ve agreed to receive. Messages may include quote delivery, booking confirmations, scheduling updates, payment links, account notifications, replies to your inquiries, and — only where you separately opt in — occasional offers.
AI processing: Message content and operational data are processed by Anthropic’s Claude models via API to generate responses and automate workflows. Anthropic does not use our API data to train its models.
Improving the platform: We derive aggregated, de-identified operational insights (e.g., “quotes answered within 5 minutes convert better”). These insights never identify you, your business, or any individual, and cannot be reversed to do so. RossmanCX de-identifies this data before any cross-tenant use. RossmanCX does not use one business’s personal information to market for another business, and does not share personal information across businesses.
Legal compliance, security, and fraud prevention.
We do not sell personal information. We do not share personal information with third parties for their own marketing.
Text messaging (SMS)
If you opt in to text messages from us or from a business using M1dge:
Consent to receive texts is collected separately by each business you deal with and is never transferred between businesses. Message frequency varies. Message and data rates may apply. Reply HELP for help and STOP to cancel at any time.
Who processes data on our behalf (sub-processors)
| Sub-processor | Purpose |
|---|---|
| Cloudflare | Website hosting and delivery |
| Cloudflare Web Analytics | Cookieless site analytics |
| Supabase | Database and application infrastructure |
| Twilio | SMS delivery |
| SendGrid | Transactional email delivery |
| Square | Payment processing |
| Anthropic | AI inference |
| n8n | Workflow automation |
| Calendly | Scheduling (where enabled) |
Each is bound to use data only to provide its service to us. We’ll update this table if the list changes.
How long we keep it
Account and operational records: for the life of the account plus the period required for legal, tax, and dispute purposes. Consent and opt-out records: at least five years (as required by telemarketing rules). Website inquiries: as long as needed to respond and follow up. You can ask us to delete sooner (below).
Security
Data is encrypted in transit and at rest. Access is restricted per business — each M1dge tenant’s data is isolated from every other tenant’s at the database level.
Your choices and rights
Regardless of where you live, you can ask us to: access the personal information we hold about you, correct it, delete it, or stop messaging you (reply STOP to any text; click unsubscribe in any marketing email). We honor requests under the Colorado Privacy Act and California Consumer Privacy Act as a matter of policy, even where thresholds don’t require it. We don’t sell personal data or use it for targeted advertising, so there’s nothing to opt out of there. You may also ask RossmanCX for a portable copy of your personal information. If RossmanCX denies a request, you may appeal by emailing privacy@rossmancx.com with the word Appeal, and RossmanCX will respond within 45 days under the Colorado Privacy Act.
To exercise any right: email privacy@rossmancx.com. We’ll respond within 45 days. You may use an authorized agent to submit a request, and RossmanCX may verify your identity before responding. We will never discriminate against you for exercising a privacy right.
If you’re a customer of a business using M1dge, direct requests to that business; we support them in fulfilling it.
Children
Our services are for businesses and their adult customers. They are not directed to children under 13, and we don’t knowingly collect children’s information. SMS opt-in is limited to the mobile account holder or an authorized adult user.
Changes
If we change this policy, we’ll update the effective date and, for material changes affecting active users, notify by email or text (if you’ve opted in).
Contact
RossmanCX LLC
4061 Wheathead St., Timnath, CO 80547
privacy@rossmancx.com