Legal
Privacy Policy
Last updated: 2026-06-20
Who we are
ColdEngine is a cold-email outreach platform operated by Strenor Labs LLC ("we", "us"), a company registered in the State of Wyoming, United States of America (business filing ID 2026-001989970), with its registered office at 30 N Gould St, Suite N, Sheridan, WY 82801, United States. Strenor Labs LLC is the data controller for the personal data described here. For any privacy question contact privacy@coldengine.io.
What we collect
Account data (your name, email, password hash); workspace data you create (campaigns, leads, sequences, replies); email metadata you authorise us to access through your connected mailboxes (sent and received messages, headers and bodies, IMAP/SMTP credentials encrypted at rest); billing data (handled by our payment processor, who does not share full card numbers with us); and usage telemetry (page views, performance traces, errors).
How we use it
To run the service you signed up for: authenticate you, store and process your campaigns, send and receive email through the mailboxes you connect, classify and draft replies with our AI features, surface analytics, process payments, and provide support. We do not sell personal data, and we do not use your email contents to train third-party AI models.
Legal bases (GDPR Article 6)
For users in the EU/UK: performance of contract (running the platform), legitimate interest (security, abuse prevention, basic product analytics), consent (optional marketing emails, which you can opt out of at any time), and legal obligation (e.g. tax and accounting records).
Sub-processors
We rely on a small set of trusted providers to deliver the service: our cloud hosting provider (infrastructure and database hosting); Stripe as our payment processor for payments and billing; DeepSeek and Google (AI processing of reply and copy text, only when AI features are enabled); and Resend (transactional email such as password resets and team invites). Each sub-processor is bound by a data-processing agreement and may only process data on our instructions.
International transfers
As Strenor Labs LLC is established in the United States, your data may be stored and processed in the United States and in other countries where our sub-processors operate. Where data is transferred out of the EU/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We only transfer the minimum data needed for each feature.
Payments
Payments are processed by Stripe. When you buy a subscription, Stripe collects and processes your billing information under its own privacy policy. We receive confirmation of your purchase and limited billing metadata, but not your full payment-card details.
Retention
We keep workspace data for as long as your account is active. After cancellation we delete personal data within 30 days, except where law requires longer retention (for example invoices, typically retained for several years for tax purposes).
Your rights
Depending on where you live, you may have the right to access, correct, delete, port or restrict your personal data, and to object to certain processing; you can also lodge a complaint with your data-protection authority. Export your workspace data at any time from Settings → Data export. To exercise a right or delete your account, write to privacy@coldengine.io.
Recipients of your cold emails
Every email sent through ColdEngine includes a working one-click unsubscribe link (RFC 8058 List-Unsubscribe header). Recipients who opt out are added to your workspace block list automatically. As the sender, you are the controller of your recipient lists and are responsible for having a lawful basis to contact them.
Security
We protect your data with encryption in transit (HTTPS) and at rest for sensitive fields such as mailbox credentials, access controls, network firewalls, and least-privilege practices. No system is perfectly secure, but we work hard to keep your data safe and to notify you promptly of any breach that affects you.
Cookies
We use a first-party session cookie to keep you logged in and minimal cookies required for the service to function. We do not use third-party advertising cookies.
Children
The service is not directed to anyone under 18, and we do not knowingly collect personal data from children.
Changes
We will notify account owners by email of any material change to this policy at least 14 days before it takes effect.
Strenor Labs LLC, Wyoming filing ID 2026-001989970, 30 N Gould St, Suite N, Sheridan, WY 82801, United States. See also our Privacy Policy, Terms, and Refund Policy.