Privacy Policy

1. What We Collect

When you use coldcall.pro, we collect:

• Account data: Email address (used for authentication via magic link)
• Campaign inputs: Product briefs, pitch decks, company descriptions, ICP criteria, and strategy preferences you provide
• Connected accounts: Email and LinkedIn account credentials managed through a secure integration provider for outreach delivery
• Pipeline outputs: AI-generated positioning, campaigns, copy variants, lead lists, outreach records, and learnings
• Lead data: Company and contact information sourced from third-party enrichment providers during pipeline runs
• Billing data: Payment processor customer ID and purchase history (we do not store payment card numbers)
• Usage data: Tour progress, feature interactions, and pipeline run metadata

2. How We Use Your Data

• Pipeline execution: Your campaign inputs are processed through our 6-phase AI pipeline to generate positioning, find leads, write copy, and send outreach
• AI processing: Campaign data is sent to our AI provider for analysis and content generation. Under our commercial agreement, your data is not used to train AI models
• Lead enrichment: Company and contact criteria are shared with enrichment providers to source and verify leads
• Outreach delivery: Message content and recipient data are sent through your connected email/LinkedIn accounts via a secure messaging provider
• Billing: Purchase transactions are processed through a PCI-compliant payment provider

3. Third-Party Data Processors

We share data with the following categories of providers to deliver the Service:

Each provider processes data solely to deliver their specific function. We do not sell your data to any third party.

4. Data Isolation & Security

• Workspace isolation: All data is scoped to your workspace. Row-Level Security (RLS) enforces that you can only access your own data
• Encryption: Data is encrypted in transit (TLS) and at rest via our database provider's managed encryption
• API keys: Your connected account credentials and API keys are stored server-side and never exposed to the browser
• No cross-tenant access: Your campaign data, leads, and outputs are never visible to other users

5. Data Retention

• Active accounts: Data is retained for the duration of your account
• Deleted accounts: Workspace data is deleted within 30 days of account closure
• Uploaded files: Documents (pitch decks, briefs) are stored in encrypted cloud storage scoped to your workspace and deleted with your account
• Billing records: Transaction history is retained by our payment processor per their retention policy

6. Your Rights

You have the right to:

• Access: View all data associated with your workspace through the application
• Deletion: Request complete deletion of your account and all associated data
• Portability: Export your campaign data, leads, and outreach records
• Disconnect: Remove connected email and LinkedIn accounts at any time from settings
• Opt out: You control which campaigns are created and which messages are sent

7. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party trackers. Tour progress and onboarding state are stored in your database record, not in cookies.

8. Changes to This Policy

We may update this policy to reflect changes in our practices or for legal reasons. Material changes will be communicated via email. The "last updated" date at the top indicates the most recent revision.

9. Contact

For privacy questions or data requests, contact us at privacy@coldcall.pro.