Privacy policy.
Who operates Coldex
Coldex is presented under the Lumora brand. The operator’s full legal name and business address are pending confirmation. Privacy questions and requests can be sent to lumorastudios.ai.app@gmail.com.
Information used in the current preview
Hosting authentication supplies a site-specific user identifier and may supply your email and display name. The workspace currently stores its records against that user identifier. Information you enter includes business details, campaign drafts, contacts, imported source information, conversation notes, example records, proposal drafts, and booking or payment links you supply. Standard hosting and security operations may process network request information, timestamps, and error logs.
Planned integrations
Live email, payment processing, and automatic prospect discovery are not connected yet. Once enabled and authorized, mailbox integration may process relevant message content, recipients, thread identifiers, and sending/reply events. A payment processor may provide subscription status, invoice references, and payment-confirmation metadata; Coldex should not store full card numbers or card security codes.
Why information is processed
Information supports account access, campaign planning, conversation management, authorized sending, billing, technical support, security, opt-out handling, and service improvement. Processing must remain within the actions authorized by the user and the restrictions of the connected service. Customer message content is not used to build advertising profiles.
Google information
When Gmail is connected, Coldex’s use of Google Workspace information will follow Google’s API Services User Data Policy, including its Limited Use requirements. Gmail content must not be sold, used for advertising, or used to train a general-purpose AI model. Access should use the minimum necessary scopes. Disclosure to an AI or infrastructure provider must be limited to the user-authorized feature and comply with Google’s applicable policies. This integration remains subject to its required configuration and verification.
Providers and disclosure
Coldex uses a Vercel-compatible web frontend and an isolated AWS Ubuntu backend for authentication, workspace storage, campaign processing, and meetings. Mailbox credentials are encrypted on the backend. Stripe processes configured payments. These services require deployment and configuration before use. Google-hosted fonts can receive standard network request information when loaded. AWS, email authorization, and Stripe are selected for the production service, not all current processors. Providers may process information in countries different from your own. The final production provider list and any required transfer arrangements must be disclosed before launch. Information may also be disclosed where required by law or reasonably necessary to investigate abuse, secure the service, or protect legal rights.
Prospect information
Prospect records may come from data supplied by users, open datasets, and permitted public business sources. These sources can contain errors, duplicates, or outdated contact details. A listing does not establish consent or buying interest. Provider/source metadata should be retained so records can be corrected or removed where appropriate. Applicable privacy rights may still apply to publicly available business information.
Cookies and tracking
Authentication and hosting may use cookies or comparable mechanisms needed to operate the preview. Coldex has not added marketing trackers or advertising cookies to this version. The final policy must be updated if analytics, advertising, or other tracking is introduced. This preview does not change behavior based on browser Do Not Track signals.
Retention and security
Workspace records are retained for operating the preview and responding to authorized requests. Final retention periods for message history, usage records, security logs, and backups are not yet set. Request deletion through support; limited records may need to be retained for legal, security, or suppression purposes. Reasonable safeguards and per-user access checks are used, but no system can promise absolute security.
Your choices and requests
You may request access, correction, export, or deletion, and object to or restrict processing where applicable law provides those rights. You can edit your first and last name and download your Coldex account and workspace data from Account & sign-in. Contact support for deletion or other requests. Verification may be required to protect another person’s data. Planned mailbox authorization can be revoked through your Google account; revoking access does not automatically delete data previously stored in Coldex. Opt-out/suppression requests should be retained sufficiently to prevent renewed unwanted outreach.
Children and sensitive information
Coldex is intended for adults acting for businesses. Do not upload children’s information or sensitive personal information unless a specific lawful feature and processing arrangement has been established. This preview is not designed for regulated medical, financial, or other sensitive workflows.
Updates and contact
The policy date identifies revisions. Material changes must be disclosed as required before they take effect. Contact lumorastudios.ai.app@gmail.com for privacy requests, including requests about prospect information.