Colder · Provarion LLC

Your data, clearly.

Private beta privacy notice · Effective October 27, 2026

This notice covers the Colder application, including lead research and optional calling, email and calendar connections. The public website and waitlist have a separate privacy notice at trycolder.com/privacy.

What Colder stores

We store account details, workspace membership, imported and generated business contacts, lead assignments, call outcomes, notes and follow-ups. When calling is enabled, we also store your verified caller ID, call status, timing, usage records and recordings made through Colder after the recording consent step. Colder cannot listen to ordinary calls made outside the application.

CSV imports retain the contacts you import, their list membership and original columns included in your reviewed import. Colder parses the file in your browser; it does not upload the original CSV file. Saved leads and their source information remain in your workspace after a research job finishes or its temporary history expires.

Who can access workspace information

Workspace admins can view their team’s leads and call history. Callers can view leads currently assigned to them and the associated history. Reassignment or removal changes access. Playback links expire shortly after they are issued. Authorized operators may access information where needed to support a request, investigate security or operate the service.

Your optional Google connection

Connecting Google Calendar lets Colder identify the connected account, check free/busy availability, show today’s calls and meetings, create the meetings you confirm, add Google Meet links and read those meetings’ RSVP status. The requested permission can manage events on calendars you own; Colder uses it for this meeting workflow. Optional Gmail access lets you send emails you review and confirm from your connected account; it does not grant inbox-reading access. Optional Google Sheets permission permits reading spreadsheets you can access; Colder reads the spreadsheet URL you select for import. We do not request Google Drive file-listing or Google Contacts access.

Colder stores your Google account email, an encrypted connection token, and the meeting details needed for the workflow: recipient, title, description, times, event identifier, Meet link and RSVP status. Confirmed emails retain their recipient, subject, body and delivery identifier. Selected spreadsheet rows are retained as imported leads. Availability responses are used to check the requested slot and are not stored as a copy of your calendar. The daily agenda reads up to 100 events from your primary calendar, including titles, times, event links and your RSVP status, to show relevant calls and meetings. This display is cached briefly in the signed-in app; it does not import your calendar into the lead database. Meeting information is shared with Google and the invited participants when you confirm the invitation.

We use Google data only for the connected features you choose and necessary security/support. We do not sell it, use it for advertising, send it to outside AI models, or use it to train AI models. Colder’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Human access to Google data is limited to your affirmative permission for support, necessary security or legal purposes, or aggregated internal operations allowed by that policy.

Optional AI chat and sales context

Before AI chat, Colder asks whether you allow sharing with OpenAI. If you allow it, OpenAI receives your authored messages and recent conversation, saved company and profile details (including a personal story if you supplied one), reviewed writing briefs or attached excerpts, and summary workspace facts such as lead totals, follow-ups, sending readiness and your stated goals. Colder uses these to generate replies, editable drafts and sales suggestions, including separately approved background suggestions. These summaries do not automatically include raw contact records, inbox and calendar contents, recordings, transcripts, private notes or credentials. Anything you include in a message or approved brief is shared; do not paste private customer records or credentials into chat.

Your choice applies to your signed-in identity across workspaces. In Chat options, choose AI privacy to stop sharing or allow it again. Stopping blocks newly admitted model requests; it cannot recall data already sent or cancel a request already admitted. You can continue using your saved records and other available app features without AI chat. A new material sharing policy requires a new choice. Separate excerpt review still applies to attachments.

Public business research

When you generate leads, Colder sends your search description, such as business type and location, to OpenAI for public web research. Enter business criteria rather than private customer information. Colder checks discovered websites and public business contact information, retains source links, and checks matches against your saved lists inside Colder. Your uploaded lists, saved contacts, call recordings, transcripts, private notes and connected Google data are not included in these AI search requests.

These requests disable OpenAI response storage. OpenAI may retain limited API data for abuse monitoring under its policies; this is not a promise of zero retention. API data is not used to train OpenAI models by default. Public information can still be subject to its source’s rights and terms, and a published phone number does not guarantee that a business will answer.

Service providers

Clerk handles account authentication, Supabase stores application data and private recordings, and Vercel hosts the application and scheduled processing. Twilio transports calls, verifies numbers, checks public business phone numbers and initially records call audio. Resend handles application invitation and notification emails. Google and Microsoft handle the email, calendar or spreadsheet features you connect. OpenAI handles public business search requests and optional AI chat/context described above; Firecrawl supports earlier saved searches. Providers receive the information needed for their part of the service; data may be processed in the United States and other locations where they operate.

Colder does not automatically attach customer recordings, transcripts, imported leads or private notes to external AI model requests, and does not train a recommendation model on your content. Essential authentication and session storage keep you signed in. The private app does not run advertising analytics or session replay.

Optional product analytics

Product analytics is off until you enable it in Settings → Preferences. If enabled, PostHog receives named screens, onboarding steps, return visits and categories of loading failures. With a new reliability choice, reports also include a fixed error category, app component, release and loaded Colder code file/line/column. They exclude raw error text, variable values, inputs, logs, page URLs and provider stack paths. These are web JavaScript reports, not native or operating-system crash capture. A random device identifier links these visits for up to 30 days, then rotates. It is not linked to your account. Events exclude your account and workspace identifiers, company answers, message text, emails, phone numbers, contact records and recordings. We do not capture every click, record your screen, build person profiles or use these events for advertising. PostHog receives the ordinary connection metadata needed to receive the event; location enrichment is disabled.

Your choice is stored on this device. Turning it off stops new events and clears the local analytics identifier. Confirmed sign-out and account changes observed by the app also clear it. These actions do not remove events already received by PostHog. A visit starts only when the signed-in app is visible; a new visit follows 30 minutes of inactivity or a new tab. This measures returns by opted-in devices, rather than people across devices or signup retention. Earlier analytics choices do not enable the expanded reliability reports; opting in again creates a new random identifier. Global Privacy Control or Do Not Track keeps collection off. Contact us to ask about previously collected analytics.

Retention and disconnecting

Recordings are copied into private Colder storage and checked before the Twilio copy is removed. We retain workspace records while the workspace is active or until an authorized deletion request is processed. Temporary research-job history has a separate cleanup schedule; that cleanup does not delete saved leads or their retained sources. Operational logs, backups and records needed for accounting or security can have separate retention periods.

Disconnecting Google in Calling & connections removes Colder’s stored connection token and stops future access through that connection. It does not recall emails, cancel invitations already sent or remove imported leads and meeting history already saved in your workspace. You can also revoke Colder’s access in your Google Account connections. Ask us to delete stored connection or meeting information if needed; existing Google events can be managed in Google Calendar.

Your choices and contact

Use settings to update your profile and export available account information. To request access, correction, deletion or help with workspace records, email contact@provarion.ai. We verify requests before changing another person’s or a workspace’s information. Colder is intended for adults using it for their business.

Provarion LLC operates Colder. We will update this notice when the application’s data practices change and request new permission where needed.