Privacy Policy

1. Who we are

ColdCraft ("we", "us", or "our") is an AI cold email generator available at https://coldcraft.rgwnd.app. For privacy-related inquiries, contact us at support@coldcraft.app.

2. Data we collect

We collect minimal data to operate the service:

• Usage fingerprint — a randomly generated identifier stored in a cookie (coldcraft_fp) to enforce the free daily limit of 3 emails. This is not linked to your identity.
• Email address (Pro users only) — when you verify your Pro status, we look up your email address against our Stripe customer records. The email is used solely to confirm an active subscription.
• Pro token cookie — after Pro verification, a signed token is stored in the coldcraft_pro_tokencookie so you don't need to re-verify on every visit. This token contains only your email and an expiry, and is signed server-side.

We do not store the email content you generate, your prospect data, or any other personal information beyond what is listed above.

3. Cookies

Both cookies are HttpOnly (not accessible to JavaScript) and set with SameSite=Lax. No tracking or advertising cookies are used.

4. Payment data

All payment processing is handled by Stripe. ColdCraft never sees or stores your card details. Stripe's privacy policy applies to payment data: stripe.com/privacy.

5. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is shared only with Stripe as a payment processor (for Pro users), and with our hosting infrastructure necessary to run the service.

6. Your rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to erasure — request deletion of your data
• Right to object — object to how we process your data
• Right to portability — receive your data in a portable format

To exercise any of these rights, email us at support@coldcraft.app. We will respond within 30 days.

7. Data retention

Usage records (fingerprint + daily count) are retained for up to 90 days for rate-limiting purposes and then deleted. Pro verification cookies expire after 1 year.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes.

9. Contact

Questions about this privacy policy? support@coldcraft.app