Privacy policy

The short version: we collect what we need to fulfill your order, we share only with the vendors we use to deliver it, and we don't run ad trackers.

What we collect

• Order info — your email address, the ICP brief you submit (industry, role, geo, exclusions, notes), and the package you chose.
• Payment info — handled entirely by Stripe; we receive a confirmation and the last 4 digits of the card for receipts. We never see or store full card numbers.
• Email signups — if you download a free sample pack or join the launch waitlist, we collect your email and (optionally) UTM/source tags.
• Server logs — our hosting provider (Cloudflare) logs basic request data (IP, user-agent, path, timestamp) for security and abuse prevention.

What we don't collect

• No third-party advertising or analytics pixels.
• No cross-site tracking cookies.
• No social media trackers.

Vendors we share data with

• Stripe — processes payments.
• AgentMail — sends and receives email on our behalf.
• Cloudflare — hosts the site (Workers, D1, R2) and handles email routing.
• Anthropic + research APIs — used during list research; we don't send them your payment info.

Each vendor has its own privacy policy; we only share what's necessary to deliver your order.

How long we keep it

• Order records: 24 months from purchase (for refund/dispute resolution and tax records).
• Delivered lists: 30 days in cold storage, then deleted unless you ask us to retain.
• Server logs: rolling 30-day window.

Your rights

Email hello@coldsmith.dev and we'll:

• Send you a copy of the data we have about you.
• Delete your data (unless we need to retain it for legal/financial reasons — e.g., paid orders for tax records).
• Correct anything that's wrong.

EU/UK residents: this includes your rights under GDPR/UK GDPR. California residents: this includes your rights under the CCPA. We don't "sell" personal information.

Security

All traffic is over HTTPS. Secrets are stored in Cloudflare Workers secret bindings, not in source. Payment data is handled by Stripe and never touches our servers in clear form.

Changes

We'll update the "Effective" date at the top when this changes. Material changes will be announced to active customers by email.