Privacy Policy

1. Information we collect

• Account information: your name and email address, obtained when you sign up (including via Google sign-in).
• Content you provide: prospect profile text, product/CTA details, and the emails generated for you.
• Payment information: processed by Razorpay. We store only payment/subscription metadata (plan, status, transaction IDs) — never your full card details.
• Gmail metadata (optional): if you connect Gmail for reply tracking via Nylas, we access read-only message metadata (subject, sender, timestamp) to detect replies. We never read your email bodies.
• Diagnostics: error and performance data via Sentry to keep the service reliable.
• Usage analytics: how you interact with our pages — clicks, scrolls, and page views — including session replay via Microsoft Clarity. See section 6.

2. How we use your information

We use your information to provide and improve the service: to generate emails, track replies, process payments, provide support, and maintain security. We do not sell your personal data.

3. Service providers

We share data with infrastructure and processing partners strictly to operate Coldrply:

• Supabase — database & authentication
• Google (Gemini) — AI email generation
• Razorpay — payment processing
• Nylas — Gmail metadata / reply tracking (if connected)
• Resend — transactional email
• Vercel & Sentry — hosting and error monitoring
• Microsoft Clarity — product analytics, heatmaps & session replay

4. Data retention & your rights

We retain your data while your account is active. You may request access to, correction of, or deletion of your personal data, and you can disconnect Gmail at any time from Account Settings.

To exercise any of these rights, email riddhesh@coldrply.com.

5. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information and promptly address issues.

6. Analytics & session recording

We use Microsoft Clarity to understand how people use Coldrply. Clarity captures usage data — clicks, scrolls, mouse movement and page navigation — and can replay a reconstruction of your session so we can find and fix usability problems. It also sets cookies to recognise returning visitors, and Microsoft may combine this data as described in its own privacy statement.

What is not recorded: text you type into form fields is masked before it ever leaves your browser, so passwords, payment details and the content you enter are not captured in replays. We never record your Gmail message bodies.

You can opt out of this tracking entirely by enabling “Do Not Track” or a global privacy control in your browser, or by using your browser’s tracking-protection settings. See the Microsoft Privacy Statement for details on how Microsoft handles this data.