Privacy Policy

1. Introduction

ColdCraft ("we," "our," or "us") is operated by Dave Clancy and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform for AI-powered cold email campaigns.

By using ColdCraft, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

• Account information (name, email address, company name, job title)
• Billing information (processed securely through Stripe)
• Profile information you provide

2.2 SMTP and Email Configuration

• SMTP server credentials (encrypted and securely stored)
• Email domain settings (SPF, DKIM records)
• Email account configurations

2.3 Campaign Data

• Lead information and contact details
• Email content and templates
• Campaign performance metrics
• Email tracking data (opens, clicks, replies)

2.4 Usage Data

• Log files and usage statistics
• IP addresses and browser information
• Feature usage and interaction data

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our service
• To send emails on your behalf through your configured SMTP
• To personalize email content using AI (Anthropic's Claude)
• To find and enrich lead data through Apollo API
• To process payments through Stripe
• To analyze campaign performance and improve our service
• To communicate with you about your account and our services
• To detect, prevent, and address technical issues
• To comply with legal obligations and CAN-SPAM requirements

4. Data Storage and Security

Your data is stored securely using Supabase infrastructure with enterprise-grade security measures:

• All data is encrypted in transit and at rest
• SMTP credentials are encrypted using industry-standard encryption
• Database access is restricted and monitored
• Regular security audits and updates
• Data backup and disaster recovery procedures

5. Third-Party Services

We integrate with the following third-party services:

• Stripe: Payment processing (subject to Stripe's Privacy Policy)
• Apollo API: Lead discovery and email verification
• Anthropic Claude: AI-powered email personalization
• Supabase: Database and authentication services
• Your SMTP Provider: Email delivery through your own email infrastructure

These services have their own privacy policies, and we encourage you to review them.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential cookies for platform functionality
• Analytics cookies to understand usage patterns
• Email tracking pixels for campaign metrics
• Session cookies for authentication

You can control cookie preferences through your browser settings.

7. Your Rights (GDPR Compliance)

If you are a European resident, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request transfer of your data
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for data processing

To exercise these rights, contact us at support@coldcraft.ai

8. CAN-SPAM Compliance

ColdCraft is designed to comply with CAN-SPAM regulations:

• All emails include accurate sender information
• Subject lines are truthful and not misleading
• Unsubscribe links are included in every email
• Unsubscribe requests are processed within 10 business days
• Users are responsible for ensuring their email lists are compliant

Important: You are responsible for ensuring your email campaigns comply with CAN-SPAM, GDPR, and other applicable laws in your jurisdiction.

9. Data Retention

We retain your data for as long as necessary to provide our services:

• Account data: Until account deletion
• Campaign data: 2 years after campaign completion
• Usage logs: 1 year
• Billing data: 7 years (legal requirement)

You can request data deletion at any time by contacting us.

10. International Data Transfers

ColdCraft operates from Spain. If you access our service from outside the EU, your data may be transferred to and stored in countries with different data protection laws. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the new policy.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: