Privacy Policy

We collect four buckets of data:

• Account info you give us. Name, email, password hash, billing address (collected by our payment processor; we never see the card number), and any profile information you add.
• Service material you submit. Coaching applications, contact forms, messages, photos, profile drafts, support uploads, and other material you send so we can review it or provide a done-for-you service.
• Usage signals. Pages you visit, articles you read, time-on-page, and session metadata. We use this to understand product health, improve the experience, and measure whether our own advertising works; we never sell it or route it to data brokers.
• Information from other sources. We may supplement what you give us with information from data providers (for example, to verify contact details and better understand who we are serving) so we can respond to inquiries appropriately. We use it only to run and prioritize our own services, never for any eligibility decision.

We use your data for four purposes:

• Run the product (sign-in, billing, generation, support).
• Charge your card for what you bought (via our payment processor).
• Send you transactional email: receipts, password resets, coaching reminders. Not marketing blasts unless you opt in.
• Improve the product. We look at aggregate usage to figure out which features are working and which to fix.

• We don't sell your personal data or route it through data brokers.
• We don't share your coaching applications, support uploads, or service materials with anyone outside our processors.
• We don't train any public model on your private data.
• We don't run third-party ad networks on the site. The only advertising technology we use is conversion measurement for our own campaigns, and the personal identifiers involved are hashed before they leave our systems.
• We don't sell or rent your email.

AI Photos and Done-For-You Online Dating are done-for-you services. Photos, profiles, screenshots, or messages you submit are reviewed by our team for the service you requested. We do not use your private material to train public models, and we do not share it with other users.

We share personal data only with the vetted service providers that run parts of the product on our behalf, each bound by its own data protection terms and used only for the purpose listed:

• A payment processor for billing, charges, and refunds. Your card details go directly to it; we never see or store full card numbers.
• Database and application hosting providers that store and serve the product.
• A product analytics provider, so we can see which pages and features are used.
• A video delivery provider for course videos.
• An email delivery provider for the messages we send you.
• A scheduling provider for consultation-call booking.
• A community platform for member community access.
• Data verification providers that help us confirm and supplement contact information you give us.
• An advertising analytics service, so we can measure whether our own ads lead to visits and applications. Identifiers shared with it are hashed.
• AI service providers for support-ticket triage and content assistance. Private client material is never sold or used to train public models.

A current list of the specific providers is available on request at hello@coldapproach.io.

We hold your account data for as long as your account is active. If you cancel and delete your account, we delete personal data within 30 days, except for billing and tax records we're legally required to retain.

You can request a copy of your data, delete your account, or correct anything we have on file by emailing hello@coldapproach.io. We respond within 30 days. Where local law (GDPR, UK GDPR, CCPA, etc.) gives you specific rights, those rights apply on top of this policy regardless of what we say here.

Passwords are stored as bcrypt hashes rather than plaintext. Communications use HTTPS. Database access is restricted to service-role keys held in our deploy infrastructure, and every database query is scoped with row-level security so users can only access their own records. No system is risk-free, but these controls are designed to keep account access scoped and auditable.

Cold Approach is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, email us and we'll delete the account.

Our product analytics run without cookies: analytics data is stored in your browser’s localStorage so you maintain full control, and you can clear it at any time to reset analytics tracking. When we run ads for our own programs, an advertising analytics service may set cookies to measure whether those ads lead to visits and applications; you can block or clear those cookies without affecting the site. The full picture lives in our Cookie Policy.

If you are a resident of the EU, UK, California, or another jurisdiction with data privacy laws, you have specific rights regarding your personal data. You can request access to your data, correction of inaccuracies, deletion, portability, or restriction of processing. To exercise these rights, email hello@coldapproach.io with your full request. We respond within 30 days.

Your data may be transferred to, stored in, and processed in the United States and other countries. By using Cold Approach, you consent to such transfers. We implement appropriate safeguards, including standard contractual clauses where applicable, to protect your data.

Payment processing is handled by our payment processor. All billing disputes, payment errors, and refund requests must be directed to hello@coldapproach.io before initiating any action with your card issuer or bank. Chargebacks or payment disputes initiated without contacting us first may result in account suspension and recovery action. See the Terms of Service and Refund Policy for complete details.

For privacy questions, deletion requests, or to exercise any right under GDPR / CCPA / similar, email hello@coldapproach.io.