Privacy Policy | Dossier

What is Dossier's Privacy Policy?

Dossier's Privacy Policy explains how Ara Ghahramanyan collects, uses, retains, and protects personal information when you use rundossier.co, submit a pilot form, upload prospect CSVs, or book a call. It covers PIPEDA and Quebec Law 25 obligations, processor list (Cal.com, Cloudflare, Stripe, Anthropic, Apify), and 90-day deletion of prospect files.

Top 3 privacy facts about Dossier

1. We collect only what we need to deliver your order

   Contact details, pilot form fields, Cal.com bookings, prospect CSV uploads, and basic website analytics.

2. Prospect CSVs are confidential client data

   Uploaded prospect lists are used only to fulfill your order and deleted within 90 days after delivery unless you request earlier deletion.

3. We do not sell personal information

   Privacy requests can be sent to [email protected]. Quebec and Canadian access, correction, and deletion rights apply.

1. Who we are

Dossier ("we," "us," or "our") is a B2B prospect research and email-personalization service operated by Ara Ghahramanyan, based in Canada. Our website is rundossier.co.

This Privacy Policy describes how we collect, use, disclose, and protect personal information in accordance with Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and, where applicable, Quebec's Act respecting the protection of personal information in the private sector (Law 25), Alberta's Personal Information Protection Act (PIPA), and British Columbia's Personal Information Protection Act (PIPA).

Privacy inquiries and requests: [email protected].

2. What personal information we collect

We collect personal information in three categories: (1) Contact data you provide — name, work email address, company name, sequencer platform, and message text — via our intake form, email ([email protected]), or Cal.com booking; retained up to 12 months after last contact. (2) Prospect CSV files you upload — rows containing prospect names, job titles, company names, LinkedIn profile URLs, and business email addresses — used only to fulfill your order and deleted within 90 days of delivery. (3) Technical data — IP address, browser type, device type, approximate region, and pages visited — from Cloudflare server logs; retained up to 90 days.

Information you provide

• Name, work email address, company name, and sequencer platform when you submit the free pilot form.
• LinkedIn profile URL or website URL submitted with a pilot request.
• Name, email, and scheduling details when you book a call through Cal.com.
• Messages you send us by email or through our contact channels.
• Billing and account information for paid plans (payment card data is handled by our payment processor, not stored by us).

Prospect data you upload (about third parties)

• CSV files or lists containing business prospect names, job titles, companies, LinkedIn URLs, and related business contact data.
• This information relates to your prospects, not to you. We treat it as confidential client data and use it only to fulfill your order.
• You are responsible for having a lawful basis to provide this data to us and to use our deliverables (see our Terms of Service).

Technical information

• IP address, browser type, device type, and approximate region from web server logs.
• Pages visited and referral source, if we use privacy-respecting analytics.

3. How we use personal information

We use personal information for legitimate business purposes, including:

• Delivering your order: researching prospects, writing openers, and returning CSV deliverables.
• Communicating about your order, pilot request, or account.
• Processing payments and preventing fraud.
• Sending transactional messages (confirmations, delivery notices, scheduling updates).
• Improving service quality using aggregated, non-identifying feedback.
• Complying with legal obligations and responding to lawful requests.

We do not sell personal information. We do not use your prospect lists for any purpose other than fulfilling your order. We do not run advertising retargeting or sell data to data brokers.

4. Consent and legal authority (PIPEDA)

Under PIPEDA, we collect, use, and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. In practice:

• When you submit a form, book a call, or purchase a plan, you consent to the collection and use described in this policy for that purpose.
• We may rely on implied consent for follow-up communications directly related to a request you initiated.
• For commercial electronic messages (marketing email), we follow Canada's Anti-Spam Legislation (CASL) and obtain express consent where required, or rely on a permitted form of implied consent (for example, an existing business relationship). Every marketing message includes identification and an unsubscribe mechanism.
• We may process information without consent where required or authorized by law (for example, fraud prevention or responding to a court order).

5. Cookies and website analytics

Our site may set strictly necessary cookies required for security and basic operation (for example, session or anti-abuse tokens on forms).

If we use optional analytics cookies or similar technologies, we will describe them here and, where required by Canadian or provincial law, obtain your consent before activating non-essential tracking. We do not use Google Analytics advertising features or ad-retargeting pixels.

6. Service providers and cross-border processing

We use trusted third-party providers to operate our business. Some may process data outside Canada (including in the United States). Under PIPEDA, we remain accountable for personal information transferred to service providers and require protections comparable to Canadian standards.

• Cal.com, scheduling; processes name and email when you book a call.
• Cloudflare, website hosting and security (Pages, CDN).
• Payment processor (e.g. Stripe), billing; we do not store full payment card numbers.
• Email delivery provider, transactional email.
• Anthropic, AI processing for research and opener generation on prospect data you submit.
• Apify, automated retrieval of publicly available LinkedIn profile information for research.
• Database hosting, secure storage of order and account records.

Each provider maintains its own privacy policy. We share only what is necessary for them to perform services on our behalf.

7. Retention

We keep personal information only as long as needed for the purposes described above:

• Order data and prospect CSVs: up to 90 days after delivery, then securely deleted unless you request earlier deletion or a longer period is agreed in writing.
• Pilot intake records: up to 12 months after last contact, unless you request deletion sooner.
• Billing and tax records: up to 7 years, as required under Canadian tax and commercial record-keeping rules.
• Server logs: typically up to 90 days, unless needed for security investigations.

8. Safeguards

We apply reasonable administrative, technical, and physical safeguards, including:

• HTTPS/TLS encryption in transit.
• Access controls limiting prospect data to personnel fulfilling your order.
• No public storage of client prospect files.
• PCI-compliant payment processing, card numbers are not stored on our servers.

No method of transmission or storage is completely secure. If a breach creates a real risk of significant harm to you, we will notify you and, where required, the Office of the Privacy Commissioner of Canada and/or the Commission d'accès à l'information du Québec, in line with applicable law.

9. Your rights

Depending on where you live in Canada, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion, subject to legal retention obligations.
• Withdraw consent to optional processing (for example, marketing), without affecting prior lawful processing.
• Receive information about how your data is used and with whom it is shared.

Quebec residents may have additional rights under Law 25, including data portability in certain circumstances and the right to request cessation of dissemination in specific cases.

To exercise your rights, email [email protected]. We will respond within 30 days (or the shorter period required by applicable provincial law). We may need to verify your identity before fulfilling a request.

If you are not satisfied with our response, you may contact:

• Office of the Privacy Commissioner of Canada (federal): priv.gc.ca
• Commission d'accès à l'information du Québec (Quebec): cai.gouv.qc.ca
• Office of the Information and Privacy Commissioner of Alberta (Alberta): oipc.ab.ca
• Office of the Information and Privacy Commissioner for British Columbia (BC): oipc.bc.ca

10. International visitors

Our service is offered from Canada. If you access our website from outside Canada, your information may be transferred to and processed in Canada and in other countries where our service providers operate. By using our service, you acknowledge that protections may differ from those in your country. Where GDPR or UK GDPR applies to you in addition to Canadian law, we process your data on bases including contract performance, legitimate interests, legal obligation, and consent where required.

11. Children

Our service is directed at businesses and professionals. We do not knowingly collect personal information from anyone under 18. If you believe we have collected such information, contact us and we will delete it promptly.

12. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be communicated to active clients by email or a prominent notice on our website.

13. Contact

Questions or complaints about privacy: [email protected]. You may also book a call through our scheduling page at https://rundossier.co/book-call.

This policy is provided for transparency and does not constitute legal advice. Consult qualified counsel for advice specific to your situation.

Common privacy questions

Why clients trust Dossier with their data

• Verified operator: Ara Ghahramanyan, Montreal, Quebec, Canada — a named individual with a public LinkedIn profile and direct email contact.
• No data selling: Prospect CSV files used only to fulfill orders; deleted within 90 days. We have never sold or shared client prospect data.
• Proven track record: Pilot campaigns moved reply rates from 2.1% baseline to 9.6% — transparent methodology, no black-box AI, research signals cited per opener.
• Compliance: PIPEDA and Quebec Law 25 aligned. Privacy requests handled within 30 days. Processor list disclosed publicly.