Privacy Policy

Cold Craft is committed to protecting your personal data and your privacy. This policy outlines how we collect, store, and process information in accordance with the General Data Protection Regulation (GDPR) and Chrome Web Store policies.

1. Who We Are

Cold Craft is a Chrome Extension developed by Forged Labs Ltd, registered in the UK. You can contact us at coldcraft.ai/contact.

2. What Data We Collect

We collect and process the following types of personal data:

• Your email address (for login via magic link)
• Your name, job title, and contact information (if optionally saved)
• Optional product page links you submit
• Messages you generate or send using the extension
• Reminder scheduling data
• Usage data including message volume and interaction patterns
• Error logs and crash reports (non-personal unless included by user)

3. How We Use Your Data

We use your personal data solely to provide and improve the Cold Craft service. Specifically:

• To authenticate users and manage subscriptions
• To personalize and improve generated messages
• To track usage against your plan limits
• To enable reminders and allow message reaccess later
• To analyze usage trends for feature improvements

4. How We Store and Protect Your Data

Data is securely stored in Supabase (EU-hosted) and transmitted using HTTPS. Locally, session tokens and basic preferences are stored in Chrome’s extension storage. We implement appropriate security measures to protect all user data against unauthorized access or disclosure.

5. Third-Party Services

We integrate the following services:

• Supabase – for authentication, database, and session storage
• Stripe – to manage subscription and billing securely
• OpenAI – for AI message generation. Message prompts are processed but not stored by OpenAI, and no personal identifiers are included.

We do not sell or share your data with any advertisers, data brokers, or external marketing services.

6. Cookies and Tracking

Cold Craft does not use cookies or trackers in the extension itself. Our website may use basic, anonymous analytics tools to improve site experience. No tracking is performed inside your browser activity beyond domains explicitly matched by the extension.

7. Data Retention

We retain your data as long as your account is active. If your account is deleted or remains inactive for more than 12 months, we will remove your personal data from our systems within 90 days. You can request manual deletion at any time.

8. Children's Privacy

Cold Craft is not intended for children under 16. We do not knowingly collect or store personal data from children. If we become aware that such data has been collected, we will delete it.

9. Your Rights

You have the right to access, correct, export, or delete your personal data. You may also object to or restrict processing. To exercise any of these rights, please contact us at the email below.

If you wish to delete your data from Cold Craft, email us at support@coldcraft.ai with the subject line “Delete My Data” and your registered email address. We will permanently remove your data within 7 days of verifying your request.

If you're based in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.

10. Changes to This Policy

We may update this Privacy Policy as Cold Craft evolves. We will notify users of significant changes via the extension or email if applicable. You can always view the latest version on this page.

11. Contact

For any questions, feedback, or data access requests, please contact us at:
support@coldcraft.ai