Colder · Provarion LLC

Your data, clearly.

Private beta privacy notice · Effective October 20, 2026

This notice covers the Colder application, including lead research and optional calling, email and calendar connections. The public website and waitlist have a separate privacy notice at trycolder.com/privacy.

What Colder stores

We store account details, workspace membership, imported and generated business contacts, lead assignments, call outcomes, notes and follow-ups. When calling is enabled, we also store your verified caller ID, call status, timing, usage records and recordings made through Colder after the recording consent step. Colder cannot listen to ordinary calls made outside the application.

CSV imports retain the contacts you import, their list membership and original columns included in your reviewed import. Colder parses the file in your browser; it does not upload the original CSV file. Saved leads and their source information remain in your workspace after a research job finishes or its temporary history expires.

Who can access workspace information

Workspace admins can view their team’s leads and call history. Callers can view leads currently assigned to them and the associated history. Reassignment or removal changes access. Playback links expire shortly after they are issued. Authorized operators may access information where needed to support a request, investigate security or operate the service.

Your optional Google connection

Connecting Google Calendar lets Colder identify the connected account, check free/busy availability, show today’s calls and meetings, create the meetings you confirm, add Google Meet links and read those meetings’ RSVP status. The requested permission can manage events on calendars you own; Colder uses it for this meeting workflow. Optional Gmail access lets you send emails you review and confirm from your connected account; it does not grant inbox-reading access. Optional Google Sheets permission permits reading spreadsheets you can access; Colder reads the spreadsheet URL you select for import. We do not request Google Drive file-listing or Google Contacts access.

Colder stores your Google account email, an encrypted connection token, and the meeting details needed for the workflow: recipient, title, description, times, event identifier, Meet link and RSVP status. Confirmed emails retain their recipient, subject, body and delivery identifier. Selected spreadsheet rows are retained as imported leads. Availability responses are used to check the requested slot and are not stored as a copy of your calendar. The daily agenda reads up to 100 events from your primary calendar, including titles, times, event links and your RSVP status, to show relevant calls and meetings. This display is cached briefly in the signed-in app; it does not import your calendar into the lead database. Meeting information is shared with Google and the invited participants when you confirm the invitation.

We use Google data only for the connected features you choose and necessary security/support. We do not sell it, use it for advertising, send it to outside AI models, or use it to train AI models. Colder’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Human access to Google data is limited to your affirmative permission for support, necessary security or legal purposes, or aggregated internal operations allowed by that policy.

Public business research

When you generate leads, Colder sends your search description, such as business type and location, to OpenAI for public web research. Enter business criteria rather than private customer information. Colder checks discovered websites and public business contact information, retains source links, and checks matches against your saved lists inside Colder. Your uploaded lists, saved contacts, call recordings, transcripts, private notes and connected Google data are not included in these AI search requests.

These requests disable OpenAI response storage. OpenAI may retain limited API data for abuse monitoring under its policies; this is not a promise of zero retention. API data is not used to train OpenAI models by default. Public information can still be subject to its source’s rights and terms, and a published phone number does not guarantee that a business will answer.

Service providers

Clerk handles account authentication, Supabase stores application data and private recordings, and Vercel hosts the application and scheduled processing. Twilio transports calls, verifies numbers, checks public business phone numbers and initially records call audio. Resend handles application invitation and notification emails. Google and Microsoft handle the email, calendar or spreadsheet features you connect. OpenAI handles public business search requests; Firecrawl supports earlier saved searches. Providers receive the information needed for their part of the service; data may be processed in the United States and other locations where they operate.

Colder does not send customer recordings, transcripts, imported leads or private notes to external AI model APIs, and does not train a recommendation model on your content. Essential authentication and session storage keep you signed in. The private app does not run advertising analytics or session replay.

Retention and disconnecting

Recordings are copied into private Colder storage and checked before the Twilio copy is removed. We retain workspace records while the workspace is active or until an authorized deletion request is processed. Temporary research-job history has a separate cleanup schedule; that cleanup does not delete saved leads or their retained sources. Operational logs, backups and records needed for accounting or security can have separate retention periods.

Disconnecting Google in Calling & connections removes Colder’s stored connection token and stops future access through that connection. It does not recall emails, cancel invitations already sent or remove imported leads and meeting history already saved in your workspace. You can also revoke Colder’s access in your Google Account connections. Ask us to delete stored connection or meeting information if needed; existing Google events can be managed in Google Calendar.

Your choices and contact

Use settings to update your profile and export available account information. To request access, correction, deletion or help with workspace records, email contact@provarion.ai. We verify requests before changing another person’s or a workspace’s information. Colder is intended for adults using it for their business.

Provarion LLC operates Colder. We will update this notice when the application’s data practices change and request new permission where needed.