Privacy Policy

Effective date: July 1, 2026

Who we are: RossmanCX LLC, a Colorado limited liability company (“RossmanCX,” “we,” “us”). This policy covers rossmancx.com, m1dge.com, and the M1dge platform.

We believe privacy policies should be readable. This one tells you exactly what we collect, why, who touches it, and how to make us stop.

What we collect

If you visit our websites: Anonymous usage analytics via Cloudflare Web Analytics — no cookies, no cross-site tracking, no personal profiles. If you contact us (email or contact form), we receive what you send: your name, email, and message. If you book time with us through Calendly (where enabled), Calendly collects your name, email, and scheduling details under its own privacy policy.

If you are a business using M1dge: Your business contact information, account credentials, configuration choices, and the operational data you run through the platform (customer records, quotes, schedules, messages, invoices).

If you are a customer of a business that uses M1dge: That business — not RossmanCX — is who you’re dealing with. We process your information (name, contact details, service requests, messages, appointment and payment records) on that business’s behalf to run their front office. Requests about your data should go to that business first; we help them respond. For this data, RossmanCX acts as a service provider under the California Consumer Privacy Act and a processor under the Colorado Privacy Act, and uses it only to run the front office for that business.

What we never collect: We don’t buy data about you, we don’t track you across the web, and we never store full payment card numbers — payments are processed by Square.

How we use it

To operate the services: answering inquiries, generating quotes, scheduling, invoicing, and sending the messages you’ve agreed to receive. Messages may include quote delivery, booking confirmations, scheduling updates, payment links, account notifications, replies to your inquiries, and — only where you separately opt in — occasional offers.

AI processing: Message content and operational data are processed by Anthropic’s Claude models via API to generate responses and automate workflows. Anthropic does not use our API data to train its models.

Improving the platform: We derive aggregated, de-identified operational insights (e.g., “quotes answered within 5 minutes convert better”). These insights never identify you, your business, or any individual, and cannot be reversed to do so. RossmanCX de-identifies this data before any cross-tenant use. RossmanCX does not use one business’s personal information to market for another business, and does not share personal information across businesses.

Legal compliance, security, and fraud prevention.

We do not sell personal information. We do not share personal information with third parties for their own marketing.

Text messaging (SMS)

If you opt in to text messages from us or from a business using M1dge:

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service and message delivery, is permitted. All other categories of sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with, sold to, or bought by any third parties.

Consent to receive texts is collected separately by each business you deal with and is never transferred between businesses. Message frequency varies. Message and data rates may apply. Reply HELP for help and STOP to cancel at any time.

Who processes data on our behalf (sub-processors)

Sub-processorPurpose
CloudflareWebsite hosting and delivery
Cloudflare Web AnalyticsCookieless site analytics
SupabaseDatabase and application infrastructure
TwilioSMS delivery
SendGridTransactional email delivery
SquarePayment processing
AnthropicAI inference
n8nWorkflow automation
CalendlyScheduling (where enabled)

Each is bound to use data only to provide its service to us. We’ll update this table if the list changes.

How long we keep it

Account and operational records: for the life of the account plus the period required for legal, tax, and dispute purposes. Consent and opt-out records: at least five years (as required by telemarketing rules). Website inquiries: as long as needed to respond and follow up. You can ask us to delete sooner (below).

Security

Data is encrypted in transit and at rest. Access is restricted per business — each M1dge tenant’s data is isolated from every other tenant’s at the database level.

Your choices and rights

Regardless of where you live, you can ask us to: access the personal information we hold about you, correct it, delete it, or stop messaging you (reply STOP to any text; click unsubscribe in any marketing email). We honor requests under the Colorado Privacy Act and California Consumer Privacy Act as a matter of policy, even where thresholds don’t require it. We don’t sell personal data or use it for targeted advertising, so there’s nothing to opt out of there. You may also ask RossmanCX for a portable copy of your personal information. If RossmanCX denies a request, you may appeal by emailing privacy@rossmancx.com with the word Appeal, and RossmanCX will respond within 45 days under the Colorado Privacy Act.

To exercise any right: email privacy@rossmancx.com. We’ll respond within 45 days. You may use an authorized agent to submit a request, and RossmanCX may verify your identity before responding. We will never discriminate against you for exercising a privacy right.

If you’re a customer of a business using M1dge, direct requests to that business; we support them in fulfilling it.

Children

Our services are for businesses and their adult customers. They are not directed to children under 13, and we don’t knowingly collect children’s information. SMS opt-in is limited to the mobile account holder or an authorized adult user.

Changes

If we change this policy, we’ll update the effective date and, for material changes affecting active users, notify by email or text (if you’ve opted in).

Contact

RossmanCX LLC
4061 Wheathead St., Timnath, CO 80547
privacy@rossmancx.com