Privacy policy

1. What this covers

[Company legal name] runs Coldread. This policy explains what we collect about our users, and about the business contacts our users reach out to.

2. Data about our users

Account details (name, email), your company profile, settings, billing records from Stripe, and usage logs.

3. Data from your email provider

When you connect Gmail we request permission only to send email on your behalf (gmail.send). When you connect Zoho Mail we request only permission to create and send messages (ZohoMail.messages.CREATE). With SMTP we store an app password, encrypted, and use it only to send. We never read, store or analyse the contents of your mailbox.

Coldread's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data about business contacts

To research companies we collect publicly available business information, such as company websites, public profiles and a work email address. We use it only to write and send the email you asked for, and we keep an opt out list so people who decline are never contacted again.

[Lawful basis, retention period, and how a contact can ask for their data to be removed.]

5. Processors we use

Supabase (database and login), Vercel (hosting), Anthropic (writing), Exa (web research), Stripe (payments), Resend (system emails).

6. Your rights and contact

[Access, correction, deletion, complaints. Contact email.]