Privacy Policy
Effective November 1, 202
This policy explains what Cold River Data LLC ("we", "us") collects when you use Cold River Data at coldriverdata.net, why, and what choices you have.
In short: we store what you upload so you can read, search and download it. We do not sell it, show ads against it, or use it to train AI models. Your content is private to your account, but it is not end-to-end encrypted, so do not upload anything you would not trust a storage provider to hold.
1. What we collect
- Account details: your email address and a scrambled (hashed) version of your password. We never store the password itself.
- Your content: the files you upload, and the conversations, titles, dates and messages we read from AI chat exports. Chat exports can include personal and sensitive information about you and about other people; that is stored as part of your content.
- Billing records: your plan, payment status, renewal date and the customer reference Stripe gives us. Card numbers and wallet details go directly to Stripe and never reach our servers.
- Technical records: your IP address, browser type and the pages requested, kept in server logs, and the IP address of sign-in attempts, used to block password guessing.
2. How we use it
- To run the service: store your files, file your conversations, and make them searchable for you.
- To take payment and manage your plan.
- To send service email, such as password resets, billing problems and notices about your account or these policies.
- To keep the service secure, prevent abuse and fix faults.
- To meet legal obligations.
We do not sell your personal information, do not share it for advertising, and do not use your content to train AI models. We do not read your content except when you ask for help that requires it, to investigate a reported breach of our terms, or when the law requires.
3. Who else handles your information
We use a small number of companies to run the service. They may process your information only to provide their service to us:
- Stripe processes payments.
- Hetzner provides the servers where your account and content are stored.
- Cloudflare carries traffic between your browser and our servers and protects the site from attacks.
- Google Fonts supplies the typefaces on our pages; your browser requests them from Google, which sees your IP address.
We may also disclose information if required by a valid legal demand, to protect someone's safety or our legal rights, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.
4. Cookies
We set one cookie, which keeps you signed in. We do not use advertising or analytics cookies. Stripe sets its own cookies on its checkout and billing pages.
5. Security
Connections to the site are encrypted in transit (HTTPS). Uploaded files are kept outside the public web folder and are served only to the signed-in account that owns them. Passwords are stored hashed. Your content is not end-to-end encrypted, which means it could be accessed by us or by our hosting provider if required. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as the law requires.
6. How long we keep it
- Your content stays until you delete it or your account is deleted. Deleting a file removes it and the conversations filed from it.
- After a plan ends, content is kept for 90 days and may then be deleted, with notice by email first.
- Backups that contain deleted content are overwritten on a rolling schedule.
- Billing records are kept as long as tax and accounting rules require. Server logs are kept for a limited period for security and troubleshooting.
7. Your choices and rights
- Download: you can download any file you have uploaded at any time.
- Delete: you can delete individual files yourself, or ask us to delete your whole account and content.
- Access and correction: you can ask what personal information we hold about you and ask us to correct it.
Depending on where you live, you may have further rights under local privacy law, such as objecting to certain uses or complaining to a regulator. To make any request, write to [email protected] from the email address on your account. We do not discriminate against anyone for using these rights.
8. Other people's information
Your uploads may mention other people. You are responsible for having the right to store that information. If you believe someone has stored your personal information on the service without a right to, contact us.
9. Children
The service is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.
10. Where information is processed
Your information is processed in the United States and in any other country where we or the companies listed above operate. By using the service you understand that it may be transferred to and stored in those places.
11. Changes to this policy
If we change this policy in a way that matters, we will email you or post a notice on the site before the change takes effect, and update the effective date above.
12. Contact
Cold River Data LLC
533 W Metcalfe St hutto, TX 7834
[email protected]