Privacy Policy

1. Introduction

This Privacy Policy details how Rolotus Digital Inc. ("Rolotus", "we", "us", "our") collects, uses, discloses, and protects your information when you use rolotus.digital and our services.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25, and applicable US privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

2. Information We Collect

To provide, improve, and market our services, we collect several types of information:

2.1 Personal & Business Information

• Full name, email address, phone number, mailing address
• Company name, website URL, logo, and brand
• Web data provided or scraped from your public pages

2.2 Digital Assets

• Logos, images, and multimedia content you upload
• Professional profile information
• Contact details and social media

2.3 Automated Technical & Traffic Data

When you visit or use our Platform, we automatically collect:

• IP address and browser characteristics
• Device characteristics and operating system
• Language preferences and referring URLs
• Device name and country
• Geolocation (precise or approximate)
• Information about how and when you use our Platform

2.4 Internet Traffic & Browsing Data

We collect internet traffic data, browsing history, clickstream data, and interaction data through cookies, pixel tags, web beacons, and other tracking technologies. This allows us to understand user behavior, optimize our services, and deliver targeted content.

3. How We Use Your Information

We use your data for the following purposes:

3.1 Service Provision

• Create, link, host, and maintain your digital NFC business cards and web profiles
• Develop and maintain web applications and CRM solutions
• Provide VPN solutions and secure network infrastructure
• Offer digital marketing services and SEO optimization
• Process payments and manage your 3-year subscription

3.2 Marketing, Advertising & Affiliates

With your explicit consent (granted via our Terms of Use), we use your company name, brand assets, images, and technical data for:

• Our advertising and promotional materials
• Website demonstrations and case studies
• Social media and portfolio showcases
• Current or future affiliate programs

3.3 Analytics & Future Applications

We use traffic and browsing data to:

• Analyze market trends
• Improve our Platform
• Develop future applications, features, or AI models within the Rolotus ecosystem

4. Disclosure and Third Parties

We do not sell your personal information for money. However, we share it with trusted third parties essential to our broad operations:

4.1 Service Providers

• Payment processors: Shopify for transaction processing
• Secure image hosting: Cloudinary for storage and optimization
• Web hosting providers: Hosting services under strict confidentiality agreements

4.2 Affiliates & Marketing Partners

We may share data with:

• Current and future affiliate partners
• Advertising networks
• Marketing agencies to help us promote our services and yours

4.3 Future Ecosystem Integrations

By using our services, you consent to the sharing of your data with other third-party applications, platforms, or programs that may be integrated into the Rolotus ecosystem in the future.

5. Data Retention

We retain your personal information:

• As long as your account is active
• Plus a period of 3 years thereafter to comply with legal, tax, and accounting obligations, or to resolve disputes

After this period, your data will be securely deleted or anonymized.

6. Your Rights (PIPEDA, Law 25 & CCPA)

In accordance with PIPEDA (Canada), Law 25 (Quebec), and applicable US laws (such as CCPA/CPRA), you have the right to:

6.1 Right of Access

Access the personal information we hold about you and obtain a copy (data portability).

6.2 Right to Rectification

Request correction of your data if it is inaccurate or incomplete.

6.3 Right to Withdraw Consent

Withdraw your consent for marketing or affiliate data sharing at any time.

6.4 Right to Deletion

Request deletion of your personal information. This action is irreversible and will result in the loss of your digital cards and web profiles.

6.5 Right to Opt-Out (California)

If you are a California resident, you have the right to request that we do not "sell" your personal information as defined by the CCPA. To exercise this right, contact us at info@rolotus.digital.

To exercise these rights, contact our Privacy Officer at info@rolotus.digital. We will respond within 30 days.

7. Data Security

We implement robust security measures to protect your information:

• Industry-standard encryption for data in transit and at rest
• Secure servers with firewalls and intrusion detection systems
• Image sanitization protocols for uploaded files
• Strict access controls limited to authorized personnel
• Regular security audits and penetration testing

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to:

• Analyze traffic and user behavior
• Personalize content and user experience
• Remember your preferences (language, cart, etc.)
• Measure the effectiveness of our marketing campaigns

8.1 Cookie Management

You can manage your cookie preferences via our cookie banner displayed during your first visit. You can also configure your browser to refuse cookies, although this may affect certain site functionalities.

8.2 Types of Cookies Used

• Essential cookies: Necessary for site operation (authentication, cart, security)
• Analytical cookies: Help us understand how visitors interact with the site
• Marketing cookies: Used to deliver relevant advertisements (with your consent)

Disabling non-essential cookies will not affect the core functionality of your digital card.

9. Protection of Minors

Our services are not intended for individuals under 18 years of age (or under 21 years depending on the jurisdiction in the United States). We do not knowingly collect personal information from minors.

If you believe we have collected information from a minor, contact us immediately at info@rolotus.digital and we will take the necessary steps to delete that data.

10. International Data Transfers

Your personal information may be transferred and processed in countries other than Canada, including the United States, for the needs of our service providers (hosting, payment, etc.).

When we transfer data outside of Quebec/Canada, we ensure that:

• The destination country offers an adequate level of protection, or
• Appropriate contractual safeguards are in place (standard contractual clauses), or
• You have explicitly consented to the transfer after being informed of the risks

11. Policy Modifications

We reserve the right to modify this Privacy Policy at any time. Modifications will take effect upon posting on our website.

We will notify you of material modifications by:

• Email to the address associated with your account
• Prominent notice on our website

Your continued use of the services after the posting of modifications constitutes your acceptance of such modifications.

12. Contact

For any questions regarding this Privacy Policy, or to exercise your rights, contact our Privacy Officer:

• Email: info@rolotus.digital
• Website: https://rolotus.digital
• Company: Rolotus Digital Inc.
• Jurisdiction: Quebec, Canada

Competent Protection Authorities

If you believe we have not fulfilled our data protection obligations, you have the right to file a complaint with:

• Commission d'accès à l'information du Québec (for Quebec residents)
• Office of the Privacy Commissioner of Canada (for Canadian residents)
• California Privacy Protection Agency (CPPA) (for California residents)