1. Information we collect
ColdVisit may collect the following information:
- Account information: your name, email address, account identifier, and sign-in information provided through Clerk.
- Audit information: submitted URLs, publicly visible page content, screenshots, browser observations, click destinations, generated reports, and audit status.
- Purchase information: payment status, price, currency, and transaction identifiers from Dodo Payments. We do not receive or store your full card number.
- Reliability information: error stack traces, performance traces, application routes, account identifiers, email addresses, audit identifiers, and submitted public website URLs associated with a failure. We remove URL query strings, credentials, cookies, authorization headers, and request bodies before sending error events.
- Technical information: basic device, browser, page-view, diagnostic, security, and server-log information.
- Communications: messages and support requests you send to us.
2. How we use information
We use information to:
- run browser audits and generate, store, deliver, and unlock reports;
- create and secure accounts, process payments, and send service emails;
- troubleshoot failures, prevent abuse, and monitor reliability and costs;
- understand aggregate product usage and improve ColdVisit; and
- comply with legal obligations and enforce our terms.
We do not sell your personal information or use it for third-party behavioral advertising.
3. Automated and AI processing
To create a report, page content, screenshots, and extracted browser observations may be sent to configured AI providers, currently Anthropic and, where enabled, OpenAI. These providers process that material on our behalf to classify the page and generate audit findings. Do not submit confidential, regulated, or sensitive personal information.
4. Services that help us operate
We share information only as needed with service providers such as:
- Clerk for authentication and account management;
- Dodo Payments for checkout, payment, tax, and transaction processing;
- Anthropic and OpenAI for AI-assisted report generation;
- Cloudflare R2 and our database or hosting providers for report and file storage;
- Resend for transactional email; and
- Sentry for error monitoring, debugging, and performance tracing;
- PostHog for consent-based product analytics and session replay; and
- Vercel Analytics and infrastructure providers for hosting, usage, and reliability.
We may also disclose information if required by law, to protect users or the service, or as part of a business transfer. We do not authorize providers to use your information for unrelated purposes.
5. Report visibility
Reports are associated with your account, but report URLs may be shareable. Anyone with a valid shareable link may be able to view some or all report content. Screenshots can include whatever was publicly visible on the submitted page at audit time.
6. Cookies and analytics
ColdVisit and its providers may use essential cookies or similar storage for sign-in, security, and checkout. With your permission, PostHog and Google Analytics may use browser storage to understand page visits, product usage, and where users encounter friction. PostHog session replay masks every form input and masks or blocks account, report, image, video, and canvas content. You can decline this collection or change your choice through the Analytics settings link in the footer. Blocking essential storage may still prevent account or payment features from working.
7. Retention and security
We keep information for as long as reasonably necessary to provide reports, maintain business and transaction records, resolve disputes, prevent abuse, and meet legal obligations. Retention periods vary by data type and provider.
We use reasonable administrative and technical safeguards, but no online service can promise absolute security. Please contact us promptly if you believe your account or a report link has been compromised.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information, or object to certain processing. You may also ask us to close your account. Some information may be retained where required for transactions, fraud prevention, or legal compliance.
To make a request, email raihan@coldvisit.com from the address associated with your account. We may need to verify your identity.
9. Children, international processing, and updates
ColdVisit is not directed to children under 13, and we do not knowingly collect their personal information. Information may be processed in countries other than your own, where our providers operate.
We may update this policy as ColdVisit changes. The effective date above shows the latest revision. Privacy questions can be sent to raihan@coldvisit.com.