Privacy Policy

If you use Coldoutbound

We collect your name, email address, organization name and, if you add it, a postal address and VAT number; sign-in records (time, IP address) for security; and the mailboxes, campaigns and settings you create. We use these to provide the service, keep it secure, prevent abuse, and send you service email such as sign-up confirmation and password resets.

Legal bases: the contract with you, our legitimate interest in security and abuse prevention, and legal obligations.

We use only the cookies the app needs to keep you signed in, plus Cloudflare Turnstile on sign-up and log-in to stop bots.

If you received an email sent with Coldoutbound

The email was sent by one of our customers, from their own mailbox. That customer decided to contact you and is the controller of your data; we process it on their behalf.

To stop their emails, reply "unsubscribe" or use your mail client's Unsubscribe button: that customer can no longer email you through Coldoutbound. For anything else, such as access to or deletion of your data, contact the sender. If you can't reach them, write to us and we will pass it on and help.

From sending we also derive company-level statistics (section 5 of the Terms): for example your company's email provider and address format, and aggregate delivery rates. These contain no address or name.

If a link in the email took you to a page carrying the sender's Coldoutbound visit tag, the tag reports that visit: the code in the link, the page address and title, the time and your browser's user agent (used to tell people from mail scanners). It sets no cookies, and the sender sees that you visited.

If you visit coldoutbound.eu (new, pending legal review)

The website coldoutbound.eu sets no analytics cookies until you choose. If you accept them in the cookie banner, we load Google Analytics 4 (Google Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited) to learn which pages are read and where visitors get stuck: pages viewed, clicks and scrolling, device and browser type, approximate location derived from your IP address, and a random identifier kept in cookies. Clarity records how the page is used, with text you type masked.

The legal basis is your consent. If you reject, these tools never load. Change your choice any time with Cookie settings at the bottom of every page. Google and Microsoft may process this data in the United States under the EU-US Data Privacy Framework.

Cookies: Google Analytics sets _ga and _ga_<ID> (up to 2 years); Clarity sets _clck (1 year) and _clsk (1 day). Your choice itself is kept in your browser's local storage, not in a cookie. The app at app.coldoutbound.eu uses no analytics cookies.

If you sign up for release notes

We keep your email address, when you signed up and the text you agreed to, to send you release notes about once a month. The legal basis is your consent: withdraw it any time by unsubscribing or writing to us, and we stop. After that we keep only the record that you unsubscribed.

Who we share data with

Only the subprocessors listed on the Subprocessors page, under contracts that bind them to protect it. We do not sell personal data.

How long we keep it

Account data: while your account is open and up to 30 days after it closes. Campaign data: until you delete it or your account closes. Security logs: up to 12 months. Backups: up to 8 weeks.

Your rights

You can ask for access to, correction or deletion of your data, object to processing, or ask for a copy: write to privacy@coldoutbound.eu. You can also complain to your data protection authority.