Cookie & Tracking Notice

1. Current position

We use the measurements described below to understand page visits, acquisition, downloads, and browser-to-desktop handoffs, and Apollo to identify business visitors. We will update this Notice and provide an additional choice before using a technology where applicable law requires one.

2. Website requests and operational logs

When you request a page, our hosting and security infrastructure receives technical information needed to deliver and protect it. This can include your IP address, user agent, requested URL, referral information sent by your browser, timestamps, and security or error signals. These are server and network logs, not advertising profiles.

We use this information to route traffic, prevent abuse, investigate errors, maintain availability, and comply with legal obligations. We do not use it to follow you across unrelated sites.

3. Public-site product analytics

Rally records a closed set of events: classified page and path, referring domain, allowlisted UTM campaign values, bounded page-duration range, selected call-to-action class, placement and pricing plan, and whether a browser-to-desktop handoff was presented or attempted successfully. We do not put URL query strings or fragments, handoff tokens, resource identifiers, form values, page content, or source IP addresses in these product events.

The site may store a random first-party anonymous identifier in local storage so separate page visits can form one acquisition funnel; events may be processed in Rally's US PostHog project. The site flow does not identify this browser as a Rally account or copy names and email addresses into site events.

4. Session recording and heatmaps

On the public website, the site loads PostHog's browser SDK through our own address, p.rallywith.ai. It records how each visit uses the page: a replay of what was on screen, mouse movement, clicks and scrolling, which elements were clicked, clicks that did nothing, errors on the page, browser console messages and page-load timing. These records are keyed on the same random anonymous identifier as the events above, kept in the browser's local and session storage, and are not linked to a Rally account. The SDK sets no cookie, and our PostHog project discards source IP addresses.

The SDK never loads on a page whose own address carries a sign-in ticket, an invitation, a download grant or a link to a Rally resource, such as the pages that complete a desktop sign-in or open an invitation, nor on the page-not-found page, so those addresses cannot enter a recording. Recorded pages may still show ordinary sign-in and download buttons.

5. Apollo landing-page visitor tracking

Our homepage and its landing-page variants load Apollo’s website tracker. It sends page visits and attribution information directly to Apollo and uses first-party cookies and local storage for visitor identifiers and queued events. Apollo can also load LiveIntent to resolve visitor identifiers, including hashed email identifiers. This third-party identification operates separately from the anonymous first-party product analytics described above and is not limited to their closed event fields. It does not load on our sign-in, invitation, download-grant, or resource-handoff pages.

6. Rally desktop storage

The Rally desktop application may store limited preferences on your device, such as interface dimensions and device-level settings, using local storage or equivalent application storage. These preferences are not browser cookies and are not used for cross-site advertising. Authentication secrets and connector credentials use separate protected mechanisms described on our Security page.

7. Links and connected services

Rally links to and can connect with services operated by other companies. Those services may use their own cookies, SDKs, pixels, logs, or similar technologies under their own notices. When you open a provider’s site or authorize a connection, review that provider’s choices and controls. This Notice does not govern their independent tracking.

8. Browser signals and privacy choices

Some browsers send “Do Not Track” or Global Privacy Control signals. We will honor legally applicable browser signals. You can also block third-party tracking requests using browser privacy controls.

You can clear or block site storage and limit referral information using your browser or device settings. If local storage is unavailable, the site remains usable and product measurement fails independently.

9. Changes and contact

We may update this Notice when our site or desktop storage changes. We will change the effective date and provide a consent control if required. Questions can be sent to help@rallywith.ai. For broader data practices, see the Privacy Policy.