Privacy Policy

Cold Email Inboxes LLC operates coldemailinboxes.io and is the controller of the personal data described here. Contact us at info@coldemailinboxes.io.

Account data. Your name, email address, account type, and organization name if you register as an organization. Authentication is handled by Supabase; we never see or store your password.

Order data. The domains, inbox counts and configuration for each order, plus its status.

Payment data. Payments are processed by a third-party provider. We receive a transaction reference and status. We do not receive or store card numbers.

Tool queries. Domains entered into the free DNS records checker are used to perform the lookup you asked for. They are not linked to an account and are not retained beyond short-lived operational logs.

Server logs. IP address, request path, timestamp and response status, retained briefly for security, rate limiting and debugging.

We do not collect or process the contents of the email you send through inboxes we provision. We have no access to your mailboxes after handoff.

• To create and operate your account, and to authenticate you.
• To provision the domains and inboxes you order, and to support them.
• To take payment and keep the financial records the law requires.
• To protect the service against abuse, including rate limiting the free tools.
• To reply when you contact us.

Where the GDPR applies, our legal bases are performance of a contract for account, order and support data; legitimate interests for security and abuse prevention; and legal obligation for financial records.

We do not sell personal data and we do not share it for advertising. We use service providers who process data on our behalf:

• Supabase - authentication and database hosting.
• Microsoft - the tenants and mailboxes provisioned for your orders.
• Domain registrars - registering domains ordered on your behalf.
• A payment processor - handling transactions.
• Cloudflare and Google public DNS resolvers - used by the free lookup tools to resolve the domain you enter.

We may also disclose data where legally required, or to protect the rights and safety of the service and its users.

Account and order data are retained while your account is active and for as long as needed afterwards to meet legal and accounting obligations. Server logs are retained for a short operational period. You can ask us to delete your account, subject to records we are required to keep.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, and to object to certain processing. Residents of California and other US states with comparable laws have similar rights, including the right not to be discriminated against for exercising them.

Email info@coldemailinboxes.io to make a request. We respond within the period required by the applicable law.

Our providers operate infrastructure in several regions, so your data may be processed outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

We use a session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

The service is intended for business use and is not directed to anyone under 18. We do not knowingly collect data from children.

We will update this page when our practices change and revise the date above. Material changes will be communicated to account holders by email.