Overview
This Privacy Policy explains how Cole collects, uses, stores, and shares information when you use the service.
Cole is operated by Cole Corp.. The service uses third-party infrastructure for authentication, database storage, billing, AI processing, email delivery, hosting, security, and support.
Information we collect
- Account information: email address, authentication identifiers, display name, profile information, account status, and related settings.
- Invite and access information: invite and access code records, redemptions, account associations, timestamps, and access status.
- App content: conversations, prompts, messages, AI responses, projects, uploaded images and files when attachments are enabled, and shared conversation links you create or use in the app.
- Billing information: plan, subscription, billing status, customer portal state, usage and quota records, Stripe checkout identifiers, Stripe customer identifiers, subscription identifiers, invoices, and payment-event identifiers.
- Usage and technical information: timestamps, request context, session context, error state, security events, abuse-prevention records, and other operational metadata.
- Support information: contact details, account details, and messages you provide when requesting support.
How we use information
- Provide, secure, maintain, and improve the service.
- Authenticate accounts, manage sessions, and protect routes.
- Validate invite access and record invite redemptions.
- Store and display conversations, projects, app content, and shared conversation links.
- Process AI requests and return AI responses.
- Manage plans, subscriptions, billing state, checkout return handling, customer portal access, and quota enforcement.
- Send account, access, support, and service-related email.
- Troubleshoot errors, prevent abuse, investigate security events, and enforce applicable terms.
- Comply with legal obligations and respond to lawful requests.
AI processing
When you submit prompts, messages, uploaded images, uploaded files, or related conversation context, Cole sends the information needed to generate a response to OpenAI API services. AI responses are returned to the app and may be stored in your conversation history.
Do not include information in prompts, messages, or attachments unless you are comfortable having it processed for the purpose of generating and storing responses in the service.
Service providers
Cole uses service providers that process information on its behalf, including Supabase for authentication and database services, Stripe for checkout, billing, subscriptions, and customer portal access, OpenAI for AI processing, Resend or related email infrastructure for email delivery, and Vercel or related hosting infrastructure for hosting and application delivery.
These providers may process information as needed to provide their services, secure their systems, troubleshoot issues, comply with law, and support Cole's operation of the service.
Payment information
Payment card details are handled by Stripe. Cole does not store full payment card numbers, card security codes, or raw payment credentials.
Cole stores billing identifiers and billing state needed to operate checkout, subscriptions, customer portal access, payment-event handling, plan access, and quota enforcement.
Cookies and similar technologies
Cole uses cookies and similar technologies for authentication, session management, invite access, security, preferences, and checkout return handling.
You can control cookies through your browser settings, but disabling them may prevent sign-in, private beta access, checkout return handling, or other parts of the service from working correctly.
Information sharing
Cole does not sell personal information.
Cole may share information with service providers, when you direct the service to share information, when a shared conversation link makes selected content available to people with the link, when needed to comply with law, or when needed to protect the service, users, rights, safety, and security. Public shared links do not expose uploaded attachments in attachments V1.
Data retention
Cole keeps information for as long as needed to provide the service, maintain account, billing, support, usage, security, and operational records, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.
Retention periods may vary by record type and service provider. Deletion or access requests are reviewed based on account status, legal obligations, security needs, billing records, provider capabilities, and the nature of the request.
Security
Cole uses reasonable technical and organizational measures designed to protect information. No online service can guarantee complete security.
You are responsible for keeping your account credentials secure and for using the service from devices and networks you trust.
Sensitive information
Do not submit emergency information, passwords, private keys, payment card numbers in chat, government identifiers, highly sensitive financial information, highly sensitive health information, or other sensitive information unless a feature specifically asks for it and you are comfortable providing it.
Cole is not intended for emergency use or for processing highly sensitive regulated records through chat.
Children
Cole is not directed to children under 13. If you believe a child has provided personal information through the service, contact support@coleclifford.com.
Your choices
You may manage account access through the app, manage subscription and billing options through available Stripe customer portal flows, control cookies through your browser, and choose whether to create or share conversation links.
Depending on your location, you may have rights to request access, correction, deletion, or a copy of certain personal information. To make a privacy request, contact support@coleclifford.com.
Changes to this policy
Cole may update this Privacy Policy as the service changes. The date above shows when this policy was last updated.
Contact
For privacy questions or requests, contact support@coleclifford.com.