Fig. 1 · Privacy
Last updated · 2026-09-23
Privacy
1
Who is responsible
Reactive Methods SRL, Sf. Apostol Andrei 71, Oradea, Bihor 410328, Romania, VAT number RO43206110, is the controller of the personal data described here. Write to support@coldbluff.ai with any question about it.
This policy covers coldbluff.ai, the application behind it, the server your agents connect to, and the emails we send you.
2
What we collect
We collect only what the service needs.
- Account: your name, email address and password hash; if you sign in with Google, the name, email address and profile picture Google gives us.
- Your ideas: what you type into Coldbluff, and the pieces, evidence and iterations produced for them.
- Billing: your plan, invoices and payment status. Card details go to Stripe and never reach us.
- Usage: which pieces you ran, when, and how much of your limits they used; the requests your agents make with your tokens.
- Technical: IP address, browser and device type, the pages you open and errors that occur, collected through server logs and analytics.
- Correspondence: emails you send us.
3
Why, and on what legal basis
- To provide the service you asked for: running reads, storing your ideas, metering your plan, connecting your agents. Basis: performance of our contract with you.
- To take payment and keep the records tax law requires. Basis: contract, and our legal obligations.
- To send you receipts, verification emails and notices about the service or these terms. Basis: contract.
- To keep the service secure, enforce the limits and prevent abuse. Basis: our legitimate interest in running the service.
- To understand how Coldbluff is used and improve it, through analytics. Basis: our legitimate interest; you can opt out of analytics cookies.
- To answer you when you write to us. Basis: our legitimate interest in supporting you.
- To send you news about Coldbluff, only if you asked for it. Basis: your consent, which you can withdraw at any time.
4
Where your ideas go
To produce a read, we send the text of your idea and the public evidence we gather for it to language-model providers, who return summaries and structured pieces. We do this under terms that forbid them from using your content to train their models. We do not use your ideas to train models either.
The evidence in a read comes from public sources. We do not send your personal data to those sources; we read from them.
5
Who processes data for us
We use these providers. Each one processes data only on our instructions and under a contract that protects it.
- Vercel: hosting and server logs.
- Neon: the database that holds your account, ideas and evidence.
- Upstash: rate limiting for the agent surface.
- Stripe: payments, invoices and tax.
- Resend: transactional email.
- PostHog: product analytics and error reporting.
- Google: sign-in with Google, if you use it.
- Language-model providers: Anthropic, OpenAI and Google, for the processing described above.
6
Transfers outside the European Union
Some of these providers are in the United States. Where data leaves the European Economic Area we rely on the European Commission’s standard contractual clauses or on an adequacy decision, such as the EU-US Data Privacy Framework where the provider is certified under it.
7
Cookies
Coldbluff sets the cookies it needs to keep you signed in and to protect forms. These are strictly necessary and need no consent.
We also use PostHog analytics, which sets its own cookies, to understand how the site is used. You can block them in your browser, and we do not use them for advertising.
8
How long we keep it
Your account, ideas and evidence: for as long as your account exists. When you delete the account we anonymise it within thirty days, and your ideas and evidence are deleted with it.
Billing records: ten years, as Romanian accounting law requires.
Server logs and analytics: up to twelve months.
Correspondence: three years after the last message.
9
Your rights
You can ask us for a copy of your personal data, ask us to correct it or delete it, ask us to restrict or stop processing it, take it with you in a machine-readable form, and object to processing based on our legitimate interests. Where processing rests on consent, you can withdraw it at any time.
To use any of these rights, email support@coldbluff.ai from the address on your account. We answer within one month.
You can also complain to a supervisory authority. In Romania that is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, dataprotection.ro. If you live elsewhere in the European Union, the authority of your own country will take the complaint.
10
Children
Coldbluff is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think we have, write to us and we will delete it.
11
Security
Data travels encrypted and is stored with providers that encrypt it at rest. Access inside Reactive Methods SRL is limited to what running the service requires. No system is perfectly secure; if we learn of a breach that affects you, we tell you and the authority as the law requires.
12
Changes
When this policy changes, we post the new version here with its date. For changes that affect how we use your data, we email the address on your account before they take effect.