Privacy Policy

Awayish LLC ("Awayish," "we," "our," or "us"), operator of the ColdOpen platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, create an account, run practice sessions, generate scorecards, or use any ColdOpen services.

By accessing ColdOpen or submitting personal information, you agree to the terms of this Privacy Policy.

1. Information we collect

1.1 Information you provide directly

When you sign up and use ColdOpen, we collect:

• Account information — name, email address, phone number, organization name, your role within your organization, and (if you subscribe) the billing details needed to process payment.
• Practice content — the verticals, personas, and difficulty you choose; the transcripts of your practice conversations; the scores, feedback, and theme self-assessments generated from them; and session details such as duration and minutes used.
• Business information you choose to provide — such as your company name, what you sell, who your typical buyer is, typical deal size, your sales vertical, and (optionally) your company website URL. If you provide your website URL, you direct us to retrieve publicly available content from that site to personalize your practice experience.
• Voice recordings — your practice conversations take place over live voice. Audio of a session may be recorded and stored to provide features such as session replay.

Payment information is processed securely through Stripe. ColdOpen never stores full credit card numbers.

1.2 Information collected automatically

Our infrastructure providers collect IP address, browser type and version, device information, usage data, pages visited, and referring websites. This is collected automatically for operational, security, and error-monitoring purposes.

We also measure traffic to our own website ourselves, on our own servers, so that we can understand how people find ColdOpen. This first-party measurement records:

• The page requested, with query-string values removed;
• The website that referred you, recorded as a domain name only rather than a full address;
• Campaign tags in the link you followed, where present (for example utm_source);
• Approximate location, no more specific than country and region;
• Browser and device type, and whether the request came from an automated crawler.

This measurement does not use cookies and does not store anything on your device. To count returning visits within a single day without identifying you, we convert your IP address and browser identifier into a one-way code using a method that cannot be reversed back into an IP address. The IP address itself is not stored alongside this data, and the code changes every day, so it cannot be used to follow you over time or across other websites.

For the same reason, when an account first reaches our setup screen we store a one-way code derived from the connecting IP address. We use it only to notice when several free trials are opened from one device. It is never stored as an IP address, and it is never used to refuse anyone access.

1.3 Cookies and tracking

We use a small number of essential cookies to keep you signed in and remember your preferences. We do not show a cookie consent banner because we do not set any cookie that would require one: the product analytics that run in your browser are anonymous and cookieless, identifying visits through a code derived from the request itself that is discarded within a day, and the first-party server-side measurement described in section 1.2 stores nothing on your device either. We do not load advertising trackers or cross-site behavioral analytics. If we ever add anything that does require consent, we will ask for it before that technology loads. For details, see our Cookie Policy.

1.4 Information received from third parties

Stripe provides payment status information (such as successful or failed transactions). ColdOpen never receives or stores full credit card numbers.

2. How we use your information

We use your information to:

• Provide, maintain, and improve the ColdOpen Services;
• Run your practice sessions and generate the scores, feedback, and readiness analytics you request;
• Personalize your practice experience — for example, using your setup answers and (if provided) publicly available content from your company website to tailor the AI buyer, draft product knowledge, and suggested objections for your organization;
• Improve our shared roleplay content libraries using aggregated, de-identified patterns from use of the Services (such as common objection themes), with human review before anything is published for shared use — never your identity, company name, or confidential specifics;
• Communicate with you about your account, our Services, and changes to either;
• Detect, prevent, and respond to fraud, abuse, or security incidents;
• Meet our legal, tax, and regulatory obligations.

We do not sell or rent your information to third parties, and we do not use your practice content to train our own machine-learning models. To produce scores and to power the AI buyer, your transcripts and session audio are processed by our AI vendors (described below) solely to provide the Services. ColdOpen does not scrape, train on, or use real company sales-call recordings; our buyer personas and objections are curated from field experience, and may be refined over time using aggregated, de-identified patterns from use of the Services — each reviewed by a human before publication for shared use, and never including your identity, company name, or confidential specifics.

3. How we share your information

3.1 Service providers

We rely on a small number of trusted vendors to operate the Services. We share only what each one needs to do its job.

• Supabase — database, authentication, and private file storage for your account, practice content, and any stored audio.
• Vercel — application hosting and edge networking. Vercel processes request metadata as part of serving the Services.
• Stripe — payment processing and subscription management. Stripe handles all payment card data directly; we receive only a token and a high-level summary.
• Resend — transactional email delivery (welcome and account emails, invitations, and reminders).
• Anthropic — the AI that scores your practice. The transcript of a session, along with the relevant rubric and persona context, is sent to Anthropic's API to produce your score and feedback.
• ElevenLabs — the real-time voice for the AI buyer. Your audio is processed during a session, and session audio may be stored to enable replay.

We may add or change subprocessors as the Services evolve and will update this list when we do.

3.2 Within your organization

ColdOpen is a team product. If you belong to an organization, the administrators and managers of that organization can view your practice sessions, scores, and readiness within the Services for coaching and oversight. Your account and role are managed by your organization.

3.3 Legal compliance

We may disclose information to legal authorities to comply with applicable law, valid legal process, or to protect the safety of users or the public.

4. How we protect your information

ColdOpen uses encrypted transmission (TLS) for all data in flight, encrypted storage at rest for uploaded files and audio, row-level security to scope every database query to the requesting user's organization, time-limited signed URLs for stored media, and secret-rotation policies for our internal credentials.

While no online platform is 100% risk-free, we work continuously to maintain a secure environment. If you believe you have discovered a vulnerability, please report it to Hello@getcoldopen.com.

5. Data retention

We retain your account and content while your account is active. When you delete a practice session or close an account, the underlying records are soft-deleted and removed from your view immediately. Soft-deleted records and their associated files are purged from storage on a periodic basis. Backups and audit logs containing soft-deleted data may persist longer for disaster-recovery and security purposes, but are not accessible from the application itself.

If you would like data permanently and immediately purged from all systems, email Hello@getcoldopen.com and we will handle it manually.

6. Your rights

Depending on your jurisdiction, you may request access, correction, or deletion of your data, and you may withdraw consent at any time. You can access and edit most of your information directly inside the Services. To request a copy of your data in machine-readable form, or to delete your account and associated content, email Hello@getcoldopen.com. Residents of certain states (including California) may have additional rights under local law — we honor those requests in accordance with the applicable statute.

7. Children's privacy

ColdOpen is intended for use by sales professionals and is not directed at individuals under 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information, please contact us immediately and we will delete it.

8. Cookies and tracking

For a detailed explanation of how ColdOpen uses cookies and similar technologies, see our Cookie Policy. Cookie preferences may also be managed through your browser settings.

9. Third-party links

ColdOpen may link to external sites or services that we do not operate. We are not responsible for the privacy practices or content of those external sites.

10. International users

The Services are operated from the United States. If you access ColdOpen from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Material changes will be announced via the email associated with your account or a prominent notice within the Services. The "Last updated" date at the top reflects the most recent revision. Continued use after updates constitutes acceptance of the revised policy.

12. Contact us

Awayish LLC. Email: Hello@getcoldopen.com. Phone: (651) 315-8453. Website: getcoldopen.com.