Lesscold Privacy Policy

Effective Date: May 10, 2025

Pymify, Inc., operating as Lesscold ("Lesscold," "we," "us," "our"), is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://lesscold.com (the "Site"), use our "Try It" feature, register for and use our web application (the "Application" or "Platform" at app.lesscold.com), or use any of our related services (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site or use our Services.

This Policy applies where Lesscold acts as a "data controller," meaning Lesscold decides why and how personal information relating to your account and your direct interactions with us is processed. This Policy also describes how we process data on behalf of our customers when they use our Application, in which case Lesscold acts as a "data processor." Our commitments as a data processor are further detailed in our Data Processing Addendum and customer agreements.

1. WHAT INFORMATION DO WE COLLECT?

A. Personal Information You Provide To Us

We collect personal information that you voluntarily provide to us when you:

• Register for an Account (Application): When you create an account on our Application, we collect your name, email address, company name (optional), and password.
• Update Your Profile (Application): You may provide additional information such as your full name and upload an avatar.
• Use our "Try It" Feature (Site): We collect your first name, last name, company name, work email, preferred language for the demonstration email, and your reCAPTCHA token for verification.
• Upload Lead Data (Application): When you upload CSV files or manually add leads to the Application, we collect the data contained within those files/entries, which may include personal information about your leads (e.g., names, email addresses, company details, website URLs, and any other columns you provide).
• Create Email Templates (Application): We collect the content of the email templates you create, including any placeholders or custom fields.
• Create Custom AI Variables (Application): We collect the name, description, and variable key you define for custom AI variables.
• Create Custom Enrichment Templates (Application): We collect the name and prompt content you define for custom enrichment templates.
• Make Purchases (Application): If you purchase credits or subscriptions, our third-party payment processor (Stripe) collects payment information necessary to process your transaction (e.g., credit card number, security code). Lesscold does not directly store your full payment card details but may store transaction identifiers and invoice details.
• Communicate with Us: If you contact us directly (e.g., via email for support, inquiries), we collect your name, email address, the contents of your message, and any attachments or other information you choose to provide.
• Subscribe to Newsletters or Marketing Communications: We collect your name and email address if you opt-in.
• Participate in Surveys or Promotions: We may collect contact details and your responses.

B. Information Automatically Collected

When you visit our Site or use our Application, we automatically collect certain information:

• Log and Usage Data: IP address, browser type, operating system, referring URLs, device information, pages viewed, actions taken, date/time stamps, and error logs. This is collected for security, analytics, and service improvement.
• Cookies and Similar Technologies: We and our third-party partners use Cookies for functionality, analytics, and advertising.
  • Site Cookies (lesscold.com):
    • Strictly Necessary Cookies: Essential for website functionality (e.g., security features from Cloudflare).
    • Analytics Cookies: (e.g., Google Analytics, Clearbit) Help us understand usage patterns to improve our Site. These are typically off by default and configurable via our cookie banner.
    • Advertising Cookies: (e.g., LinkedIn Pixel) Used by us and third-party partners to show relevant advertising about Lesscold on our Site and other sites. These are typically off by default and configurable via our cookie banner.
  • Application Cookies (app.lesscold.com):
    • Strictly Necessary Cookies: Essential for Application functionality (e.g., session management, authentication).
    • Analytics Cookies: To understand how users interact with the Application to improve features and user experience.
  You can manage your Cookie preferences through our cookie banner or your browser settings. For more details, see our Cookie Policy.
• reCAPTCHA: Our "Try It" feature uses Google reCAPTCHA v3 to protect against spam and abuse. Your use of reCAPTCHA v3 is subject to the Google Privacy Policy and Terms of Use. This service collects hardware and software information, such as device and application data, and sends it to Google for analysis.

C. Information We Generate or Obtain from Third Parties for Enrichment

• AI-Generated Enrichments: When you use our enrichment features (Basic, Deep, Custom), our AI models (and our Python Deep Research service for deep/custom) generate insights, summaries, and other data points based on publicly available information or the prompts you provide. This generated data is associated with your leads.
• Third-Party Data Providers (Indirectly for Deep/Custom Enrichment): Our Python Deep Research service, which facilitates deep and custom enrichment, may access publicly available information from various online sources and potentially third-party data provider APIs to fulfill research prompts. Lesscold itself does not directly integrate with a broad set of B2B data providers to sell their raw data like Clay.com; rather, our AI uses public information or specific user-directed research.

2. HOW DO WE USE YOUR INFORMATION?

We process your information for legitimate business purposes, to provide and improve our Services, and for compliance with legal obligations.

AI Model Improvement:
To improve the accuracy and effectiveness of our AI models underlying the enrichment and email generation services, we may use data processed through our Services, including the content you upload (like lead data or custom prompts) and the AI-generated outputs. When used for model improvement, this data is handled with strict privacy and security measures. Where feasible, data is aggregated and anonymized to protect individual privacy. We do not use your confidential lead lists or proprietary template content to train general AI models that would be accessible to or benefit other customers directly with your specific data. Our model improvement efforts are focused on enhancing the core Lesscold AI capabilities.

3. WILL WE SHARE YOUR INFORMATION WITH ANYONE?

We may share your personal information in the following situations:

• Vendors and Service Providers: With third-party vendors who perform services for us or on our behalf. These include:
  • Supabase: Our primary cloud infrastructure, database, and storage provider (for user accounts, lead data, generated content, etc.).
  • Stripe: Our payment processor for handling credit purchases and subscriptions.
  • AI Providers (Anthropic/Claude, OpenAI, Google/Gemini): To provide AI-powered enrichment and email generation, we send relevant data (such as website content, lead details, user-defined prompts from custom templates) to these AI service providers. We configure these services, where possible, to prevent them from using your data to train their general models. Their use of data is governed by their respective privacy policies.
  • Python Deep Research Service (Internal/Hosted): For deep and custom enrichment tasks, relevant lead information and research prompts are processed by our specialized Python service, which may in turn access public web sources.
  • Resend: For sending transactional emails (e.g., password resets, payment confirmations) and demo emails from the "Try It" feature.
  • Analytics Providers (e.g., Google Analytics): For understanding Site and Application usage.
  • Other Service Providers: For hosting, data analysis, customer service, email delivery, security, and IT infrastructure.
  We have contracts in place with our service providers that require them to protect your personal information and only use it for the purposes for which it was disclosed.
• As Required By Law and Similar Disclosures: If required by law, legal process, or governmental request, or to protect the rights, property, or safety of Lesscold, our users, or others.
• Affiliates: With our parent company, Pymify, Inc., and any future affiliates for purposes consistent with this Privacy Policy.
• Business Transfers (Merger, Sale, etc.): In connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• With Your Consent: We may disclose your personal information for other purposes with your explicit consent.

We do not sell your uploaded lead lists or the specific content of your email templates to third parties for their own marketing purposes.

4. LESSCOLD AS A DATA CONTROLLER AND PROCESSOR

• Lesscold as Data Controller: Lesscold acts as a data controller for the personal information we collect from you directly when you create an account, use our Site, interact with our marketing, or contact us for support (e.g., your account details, billing information, communication records).
• Lesscold as Data Processor: When you upload lead lists or create email templates within the Application, you are the data controller for that data, and Lesscold acts as a data processor on your behalf. You are responsible for ensuring you have a lawful basis (e.g., consent, legitimate interest) to collect and process the personal data within your lead lists and to use our Services to enrich that data and send communications. Our processing of this data is governed by our Terms and Conditions and, for applicable customers, a Data Processing Addendum (DPA).

5. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

• Account Data: For as long as your account is active and for a reasonable period thereafter for operational, legal, or archival purposes.
• Uploaded Lead Data & Generated Content (Application): Retained as long as your account is active or until you delete the specific lead tables or jobs. Upon account deletion, this data will be deleted in accordance with our data deletion processes, typically within [e.g., 30-90 days] from active databases, and thereafter from backups according to backup schedules.
• CSV Exports (in Supabase Storage `generated-results` bucket): Retained based on `config.storage.resultsRetentionDays` (default 30 days), after which they may be automatically deleted.
• "Try It" Submissions & Demo Requests: Data stored in `marketing_subscribers` is kept until you unsubscribe. Data in `demo_requests` is kept for a period necessary for analysis and service improvement, then anonymized or deleted (e.g., 1 year).
• Marketing Opt-Outs: We retain information necessary to honor your opt-out requests indefinitely.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate administrative, technical, and physical security measures designed to protect the security of personal information we process. This includes data encryption in transit and at rest (where feasible), access controls, regular security assessments, and use of secure infrastructure (Supabase). However, no electronic transmission or storage technology can be 100% secure.

7. DO WE COLLECT INFORMATION FROM MINORS?

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware of any data we may have collected from children under age 18, please contact us at support@lesscold.com.

8. YOUR DATA PROTECTION RIGHTS & CHOICES

Depending on your location, you may have certain rights regarding your personal information:

• Access, Correction, Deletion: You can review and update your account information through your Application settings. You may also request access to, correction of, or deletion of your personal information we hold as a controller by contacting us. For data you've uploaded (where you are the controller), you can manage and delete it directly within the Application.
• Opt-Out of Marketing: Unsubscribe via the link in marketing emails or contact us.
• Cookie Preferences: Manage via our cookie banner and browser settings.
• Object to Processing / Restrict Processing / Data Portability (Europe): European residents have these additional rights under GDPR.

To exercise these rights, please contact us at support@lesscold.com. We will respond to requests in accordance with applicable data protection laws.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

We do not currently respond to DNT browser signals.

10. PRIVACY RIGHTS FOR RESIDENTS OF CERTAIN U.S. STATES (E.G., CALIFORNIA)

If you are a resident of certain U.S. states (e.g., California, Virginia, Colorado, etc.), you may have additional rights regarding your personal information.

A. Categories Of Personal Information We Collect and Disclose

In the past twelve (12) months, we may have collected and disclosed for a business purpose the categories of personal information detailed in Section 1 of this Policy. This includes: Identifiers (name, email, IP address), Customer Records information (billing info), Commercial Information (subscriptions), Internet Activity (Site/App usage), Geolocation Data (imprecise), Professional/Employment Information (your company, or lead data you upload), and Sensitive Personal Information (account credentials).

B. Sources Of Personal Information

As detailed in Section 1.

C. "Sale" or "Sharing" of Personal Information (as defined by state laws)

Lesscold does not "sell" your uploaded lead data or your account information in the traditional sense of exchanging it for monetary value with third parties for their independent use. However, under some state laws (like CCPA/CPRA), the use of certain third-party analytics or advertising cookies on our Site might be considered "sharing" for cross-context behavioral advertising.

• We may "share" Identifiers and Internet Activity Information with Advertising Providers for the purpose of showing you ads about Lesscold on other platforms. You can opt-out of this via our cookie consent tool.
• Our core service of providing enriched data to you (our customer) about your leads is a service we provide to you, not a "sale" of your leads' data to other third parties. The enrichment data itself is sourced from publicly available information or generated by AI based on such information or your prompts.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

D. Your Rights

• Know/Access: Request details about the personal information we have collected.
• Delete: Request deletion of your personal information, subject to exceptions.
• Correct: Request correction of inaccurate personal information.
• Opt-Out of Sale/Sharing: If applicable (e.g., for advertising cookies), opt-out. Use our "Do Not Sell or Share My Personal Information" link on this page or cookie settings.
• Limit Use of Sensitive Personal Information (California): We only use sensitive personal information (like account credentials) as necessary to provide the Services or for security.
• Non-Discrimination: We will not discriminate against you for exercising your rights.

E. How to Exercise Your Rights

Contact us at support@lesscold.com or via any provided opt-out links. We will verify your identity. Authorized agents can make requests with valid proof of authorization.

11. LESSCOLD AS A DATA BROKER

Under some state laws (e.g., Texas), Lesscold may be considered a data broker because our Services involve processing and providing information about individuals/businesses (your leads) to you, our customer, for your outreach purposes. The data we provide as enrichment is derived from publicly available sources and AI generation. If you wish to inquire about or request deletion of any publicly sourced information we might hold that pertains to you, please contact us at support@lesscold.com with "Data Broker Inquiry" in the subject line.

12. INTERNATIONAL DATA TRANSFERS

Our Services are hosted and operated in the United States. If you use our Services from outside the United States, your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers (including AI providers) operate. We take appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions where applicable) to protect your personal information when transferred.

13. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy. The "Last Updated" date at the top indicates the last revision. Material changes may be communicated via email or a notice on our Site/Application.

14. CONTACT US

Pymify, Inc.
222 W Merchandise Mart Plaza #1212
Chicago, IL 60654, USA
Email: support@lesscold.com