Privacy Policy
Last updated: July 8, 2026
The short version
ColdOpen is designed so that the sensitive things — your AI API key and your lead lists — never leave your browser. We cannot leak, sell, or train on data we never receive.
1. Data that stays in your browser
Your API key, your uploaded or pasted CSV data, your tone preference, and your free-line counter are stored in your browser's local storage on your device. Generation requests go directly from your browser to your chosen AI provider (api.openai.com or api.anthropic.com). None of this data is transmitted to, stored on, or logged by our servers. Your provider's own privacy policy applies to the requests your browser sends it.
2. Data we do collect
We collect only what is needed to sell and support the product: (a) if you join the waitlist, your email address and the page you joined from; (b) if you purchase, your email address and payment status from our payment processor (Creem), which we use to issue and validate your license key; (c) standard web-server logs (IP address, user agent, requested page) kept briefly by our hosting provider (Cloudflare) for security and abuse prevention.
3. How we use it
Waitlist emails are used to send you the launch announcement and discount — nothing else. Purchase emails are used to deliver your license key, process refunds, and answer support. We do not sell or share your email with anyone, and we do not run third-party advertising or tracking scripts.
4. Payments
Payments are processed by Creem (creem.io) as merchant of record. We never see your card details. Creem's privacy policy governs the payment data it processes.
5. Email delivery
Waitlist confirmations and license-key emails are sent via SendGrid (Twilio). Your email address is shared with SendGrid solely for delivering these transactional messages.
6. Your rights
You can ask us to delete your waitlist entry or purchase record at any time by emailing lunatixx.label@gmail.com. Data stored in your browser can be removed by clearing site data for this domain. EU/EEA residents have the rights provided by the GDPR (access, rectification, erasure, portability, objection); we honor those requests within 30 days.
7. Changes and contact
Material changes to this policy will be posted here with an updated date. Contact: lunatixx.label@gmail.com.