Privacy policy

Who we are

Rosefall is the agency brand of Bavlio Inc., a federal Canadian corporation based in Ontario, Canada. In this policy, "Rosefall", "we" and "us" mean Bavlio Inc.

This policy covers rosefall.ai, booking a call with us, and the outreach we send on LinkedIn and by email. Bavlio Inc. decides how this information is used, except in outreach we run for a client, which "Outreach" below explains.

What we collect and why

When you visit rosefall.ai

Our site tools collect your IP address, your browser and device details, the page that sent you, the campaign tags in the link you followed, the pages you view, how long you stay, and where you click and scroll. PostHog also records sessions: a replay of how you moved through a page.

We use this to see which pages work, to fix problems and to count which channel brought each visitor. "Cookies and analytics" names each tool.

When you book a call

Our booking form asks for your email, your first and last name and your monthly revenue. When you pick a time, the call goes on our Google Calendar, which sends an invitation to the email you gave.

We may save your details before you finish, so if you stop partway we can still contact you about the call.

We keep your booking in our CRM and use it to arrange the call, prepare for it and follow up about it. We don't add you to a mailing list.

Outreach

Rosefall contacts people at businesses on LinkedIn and by email, for itself and for its clients. For this we use your name, job title, company, work email, LinkedIn profile and other professional details, such as your company's size and industry, and the messages we exchange.

We get these details from LinkedIn, from company websites, and from B2B data and email verification providers.

We use them to send you messages about your work, to answer your replies, and to keep a record so we don't contact you after you ask us to stop.

When we run outreach for a client, the client chooses who to contact and what to offer, and we act for it. The messages go out from the client's LinkedIn account or from email addresses we set up for the client. You can ask the client or us to stop.

To stop our messages, reply "stop" or use the unsubscribe link where the email has one. We stop messaging you on email and LinkedIn within 10 business days at most.

When you work with us

If you become a client, we use what you give us, such as your contacts, account access and billing details, to do the work and bill for it. If you email or message us, we keep the messages to answer you.

Website visitor identification

On rosefall.ai we use RB2B, a service of Retention.com (Austin, Texas, United States), to learn which businesses and people visit our site. It runs only for visitors whose connection is in the United States, only after the page has loaded, and never on our booking page. It does not run if your browser sends a Do Not Track or Global Privacy Control signal.

When it runs, RB2B collects your IP address, the pages you view, your time on each page, the page that sent you, your browser and device details, and cookies. From this RB2B tells us your company and, for some visitors, your name, job title and LinkedIn profile.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or online profiles. We (or service providers on our behalf) may then send communications and marketing to these emails or profiles. You may opt out of receiving this advertising by visiting app.retention.com/optout.

RB2B also uses what it collects on our website for its own service: it may add it to its contributor database, which supplies data to RB2B's other customers. Under some US state privacy laws this may count as a "sale" or "sharing" of your personal information. You can ask RB2B to keep you out of that database at the same opt-out link.

We use what RB2B tells us only to contact businesses that may be interested in Rosefall. We keep it for 12 months, unless you become a client. You can ask us to delete it sooner at [email protected].

To opt out, turn on Global Privacy Control or Do Not Track in your browser, opt out at app.retention.com/optout, or email [email protected].

Cookies and analytics

rosefall.ai uses these tools:

• PostHog records page views, clicks, scrolling and sessions, and sets a cookie.
• Google Analytics counts visits and where they came from, with cookies named _ga. We turned off its advertising features. It doesn't load if your browser sends Do Not Track or Global Privacy Control.
• Cloudflare, which hosts the site, counts page views without cookies.
• RB2B, for visitors in the United States only, as "Website visitor identification" explains.

We don't use advertising pixels, such as those from Meta, LinkedIn or Google Ads.

Global Privacy Control stops Google Analytics and RB2B. To limit PostHog too, use your browser's tracking protection or a content blocker. Google's opt-out add-on is at tools.google.com/dlpage/gaoptout.

Who we share it with

We don't sell personal information, except that RB2B's use described above may count as a "sale" or "sharing" under some US state privacy laws. We share personal information with the service providers that help us run Rosefall, only for that work:

• hosting and databases
• website analytics and visitor identification
• email and calendar
• our CRM
• LinkedIn messaging
• team messaging
• AI service providers
• B2B data and email verification providers

We may also disclose information when the law requires it, to protect our rights or prevent fraud, or to a buyer if Bavlio Inc. or Rosefall is sold or merged.

Where we store it

Bavlio Inc. is in Canada, and most of our service providers store data in the United States. Information stored outside your country is subject to the laws there, and courts and authorities there may be able to access it. Where the GDPR or the UK GDPR applies, we move information out of the EU or the UK only with the safeguards those laws require.

How long we keep it

• Bookings, CRM and outreach records: 24 months after our last contact with you, unless you become a client.
• Analytics: up to 24 months.
• Information from visitor identification: 12 months, unless you become a client.
• Client and billing records: 6 years, as Canadian tax law requires.

If you ask us to stop contacting you, we keep your name and email on a do-not-contact list, so we don't message you again.

Your rights

Wherever you live, you can ask us what personal information we hold about you, get a copy, correct it, delete it, or withdraw your consent. Email [email protected]. We answer within 30 days, and may first ask you to confirm who you are. We won't treat you differently for using these rights.

Canada

Canada's federal privacy law, PIPEDA, covers how we handle personal information. If you aren't satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Under Canada's Anti-Spam Legislation (CASL), you can stop our commercial emails at any time, as "Outreach" above explains.

Quebec

Under Quebec's privacy law, as amended by Law 25, you can also ask us to stop sharing your information or to de-index a link to it, and get your information in a structured, commonly used format. Visitor identification doesn't run for visitors in Quebec, because it runs only for connections in the United States. You can complain to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.

California

If you live in California, the CCPA, as amended by the CPRA, gives you the right to know what personal information we collect, use and disclose, to delete it, to correct it, and to opt out of its sale or sharing. In the last 12 months we collected identifiers (such as your name, email, phone number, IP address and cookie IDs), professional information (job title and company), internet activity (pages viewed and clicks) and your approximate location from your IP address. We collected them from you, from your browser and from the sources in "Outreach", for the purposes in this policy, and disclosed them to the service providers listed above. We don't collect sensitive personal information as the CCPA defines it.

To opt out of sale or sharing, turn on Global Privacy Control, which stops RB2B and Google Analytics; opt out at app.retention.com/optout; or email [email protected] with "Do not sell or share my personal information". An authorized agent can make a request for you. We don't knowingly sell or share the information of anyone under 16.

The EU and the UK

If you are in the European Union or the United Kingdom, the GDPR or the UK GDPR applies. We rely on our legitimate interests in running and improving rosefall.ai, measuring our marketing and contacting businesses about our services; on taking steps you asked for before a contract, such as arranging a call you booked; on legal obligations, such as tax records; and on your consent, where we ask for it.

You have the right to access, correct and delete your information, to restrict or object to how we use it, to object at any time to direct marketing, to receive your information in a portable format, and to withdraw consent. You can complain to the data protection authority where you live, or in the UK to the Information Commissioner's Office at ico.org.uk.

Security

We use HTTPS on rosefall.ai, our booking page and our CRM, and only team members who need your information can see it. If a breach creates a real risk of significant harm to you, we will tell you and the regulators, as the law requires.

Children

rosefall.ai is for businesses. We don't knowingly collect information from anyone under 16.

Changes

When we change this policy, we post the new version here and change the date at the top.

Contact us

Bavlio Inc., Ontario, Canada, is responsible for your information under this policy. Adam Badar, Founder, is our privacy officer. For any question or request about your information, email [email protected].