Privacy Policy

Awayish LLC ("Awayish," "we," "our," or "us"), operator of the ColdOpen platform, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, create an account, run practice sessions, generate scorecards, or use any ColdOpen services.

By accessing ColdOpen or submitting personal information, you agree to the terms of this Privacy Policy.

1. Information we collect

1.1 Information you provide directly

When you sign up and use ColdOpen, we collect:

• Account information: name, email address, organization name, your role within your organization, and (if you subscribe) the billing details needed to process payment.
• Practice content: the buyer you pick and the difficulty dials you set; the transcripts of your practice conversations; the scores, feedback, and theme self-assessments generated from them; and session details such as duration and minutes used.
• Business information you choose to provide, such as your company name, what you sell, who your typical buyer is, typical deal size, your sales vertical, and (optionally) your company website URL. If you provide your website URL, you direct us to retrieve publicly available content from that site to personalize your practice experience.
• Voice recordings: your practice conversations take place over live voice, so the audio of a call, both your side and the AI buyer's, is recorded on our servers and kept in private storage. Recordings exist for our own quality review and troubleshooting, and only authorized ColdOpen staff can play one. A recording is kept until it is deleted, either by a ColdOpen administrator or when you delete your account; there is no automatic deletion schedule. What you can review on your scorecard is the written transcript of the conversation, not the audio.

Payment information is processed securely through Stripe. ColdOpen never stores full credit card numbers.

1.2 Information collected automatically

Our infrastructure providers collect IP address, browser type and version, device information, usage data, pages visited, and referring websites. This is collected automatically for operational, security, and error-monitoring purposes.

We also measure traffic to our own website ourselves, on our own servers, so that we can understand how people find ColdOpen. This first-party measurement records:

• The page requested, with query-string values removed;
• The website that referred you, recorded as a domain name only rather than a full address;
• Campaign tags in the link you followed, where present (for example utm_source);
• Approximate location, no more specific than country and region;
• Browser and device type, and whether the request came from an automated crawler.

This measurement does not use cookies and does not store anything on your device. To count returning visits within a single day without identifying you, we convert your IP address and browser identifier into a one-way code using a method that cannot be reversed back into an IP address. The IP address itself is not stored alongside this data, and the code changes every day, so it cannot be used to follow you over time or across other websites.

For the same reason, when an account first reaches our setup screen we store a one-way code derived from the connecting IP address. We use it to notice when several free trials are opened from one network, to withhold the free trial minutes when a trial has already been used from that network, and to link related accounts together so that we can review them ourselves. It is never stored as an IP address, it is never used to block an account or to refuse anyone a sign-in.

1.3 Cookies and tracking

We use a small number of essential cookies to keep you signed in and remember your preferences. We do not show a cookie consent banner because we do not set any cookie that would require one: the product analytics that run in your browser are anonymous and cookieless, identifying visits through a code derived from the request itself that is discarded within a day, and the first-party server-side measurement described in section 1.2 stores nothing on your device either. We do not load advertising trackers or cross-site behavioral analytics. If we ever add anything that does require consent, we will ask for it before that technology loads. For details, see our Cookie Policy.

1.4 Information received from third parties

Stripe provides payment status information (such as successful or failed transactions). ColdOpen never receives or stores full credit card numbers.

2. How we use your information

We use your information to:

• Provide, maintain, and improve the ColdOpen Services;
• Run your practice sessions and generate the scores, feedback, and readiness analytics you request;
• Personalize your practice experience: for example, using your setup answers and (if provided) publicly available content from your company website to tailor the AI buyer, draft product knowledge, and suggested objections for your organization;
• Improve our shared roleplay content libraries using aggregated, de-identified patterns from use of the Services (such as common objection themes), with human review before anything is published for shared use, and never your identity, company name, or confidential specifics;
• Communicate with you about your account, our Services, and changes to either;
• Detect, prevent, and respond to fraud, abuse, or security incidents;
• Meet our legal, tax, and regulatory obligations.

Some of the email we send is marketing rather than an account notice: a check-in after your first week, a nudge when you have not practiced for a while, the Monday summary we send to managers, and occasional offers. Every one of those carries a one-click unsubscribe link, and unsubscribing stops that kind of email without affecting the account and security messages you still need.

We do not sell or rent your information to third parties, and we do not use your practice content to train our own machine-learning models. To power the AI buyer and to produce your scores, your session audio, your transcripts, and the practice context built for your organization are processed by the AI vendors listed below, solely to provide the Services. The same call that scores a transcript also notes things your buyer could learn from it, such as a product detail or a phrase you used; nothing it notes reaches your buyer until a person on your team or at ColdOpen accepts it. ColdOpen does not scrape, train on, or use real company sales-call recordings; our buyer personas and objections are curated from field experience, and may be refined over time using aggregated, de-identified patterns from use of the Services, each reviewed by a human before publication for shared use, and never including your identity, company name, or confidential specifics.

3. How we share your information

3.1 Service providers

We rely on a small number of trusted vendors to operate the Services. We share only what each one needs to do its job.

• Supabase: database, authentication, and private file storage for your account, practice content, and your stored call recordings.
• Vercel: application hosting and edge networking. Vercel processes request metadata as part of serving the Services.
• Stripe: payment processing and subscription management. Stripe handles all payment card data directly; we receive only a token and a high-level summary.
• Resend: transactional email delivery (welcome and account emails, invitations, and reminders).
• Cloudflare: bot and abuse protection on our public forms and sign-in screens. Cloudflare receives your IP address and signals from your browser in order to judge whether a submission is automated. It is not used for advertising or for tracking you across websites.
• Expo: over-the-air updates for the ColdOpen mobile app. Each time the app starts, it asks Expo's update service whether newer app code is available. That request carries a randomized identifier created when the app is installed, the platform and app version you are running, and, if the app crashed the last time you opened it, the text of that error, so that an update can be delivered or a bad one rolled back. Reminders in the mobile app are scheduled on your own device, so no push token is sent to Expo or to us.
• OpenAI: the AI buyer and the scoring. Your session audio and the practice context built for your organization are processed by OpenAI's live voice model to conduct the roleplay, and the transcript of the call, the scoring rubric, and the business facts your organization has confirmed are sent to OpenAI to produce your score and feedback.
• Anthropic: the AI that writes the practice content behind your buyer. Your setup answers, and publicly available content from the company website you provide, are sent to Anthropic to build your organization's AI buyer, its objection library, and the coaching notes behind it, and the same models draft product knowledge and suggested wording for someone on your team to approve. If you switch the live coach on for a call, the running transcript of that call is sent to Anthropic as well, to produce the prompts you see while you talk.
• ElevenLabs: the voice provider ColdOpen used before September 2026. That integration has ended. Practice calls no longer reach ElevenLabs, we no longer hold credentials for it, and recordings of those older calls are not accessible from the Services. Any copies ElevenLabs still holds are governed by ElevenLabs' own policies.

We may add or change subprocessors as the Services evolve and will update this list when we do.

Authorized ColdOpen staff may review stored call recordings, transcripts, and scores to troubleshoot issues and evaluate the quality of the practice experience. Playing a recording is restricted to ColdOpen platform administrators: nobody inside your own organization, including your managers, can play one.

3.2 Within your organization

ColdOpen is a team product. If you belong to an organization, the administrators and managers of that organization can view your practice sessions, scores, and readiness within the Services for coaching and oversight. Your account and role are managed by your organization.

3.3 Legal compliance

We may disclose information to legal authorities to comply with applicable law, valid legal process, or to protect the safety of users or the public.

4. How we protect your information

ColdOpen uses encrypted transmission (TLS) for all data in flight, encrypted storage at rest for uploaded files and audio, row-level security to scope every database query to the requesting user's organization, time-limited signed URLs for stored media, and secret-rotation policies for our internal credentials.

While no online platform is 100% risk-free, we work continuously to maintain a secure environment. If you believe you have discovered a vulnerability, please report it to Hello@getcoldopen.com.

5. Data retention

We retain your account and content while your account is active. Deleting a practice session archives it: the session leaves your history and you can restore it, so the underlying record is kept rather than erased, and archived sessions are not deleted on a schedule.

Stored call recordings are kept until they are deleted, and there is no automatic deletion schedule for them. A recording is deleted in one of two ways: a ColdOpen administrator deletes it, which removes the audio from storage while the call's transcript, score, and billing records stay; or you delete your account, as described below.

Deleting your account is what removes your content. The account and the records that belong to it, including your profile, practice sessions, transcripts, scores, self-assessments, and usage history, are deleted from our database; your uploaded profile photo is removed from storage; and the stored audio of your calls is queued for deletion and removed from storage shortly afterwards. If you were the last member of your organization, the organization and its records go with it.

Backups and audit logs may hold a copy of deleted data for longer, for disaster-recovery and security purposes, but they are not reachable from the application itself. If you would like data permanently and immediately purged from every system, email Hello@getcoldopen.com and we will handle it by hand.

6. Your rights

Depending on your jurisdiction, you may request access, correction, or deletion of your data, and you may withdraw consent at any time. You can access and edit most of your information directly inside the Services.

You can delete your account yourself, without asking us. On the website, open Settings and use "Delete account". In the ColdOpen mobile app, open the Settings tab and use "Delete account". Either one deletes the account and its content as described in section 5. If you cannot reach the website or the app, you can request deletion by emailing Hello@getcoldopen.com, and you can use the same address to request a copy of your data in machine-readable form.

Residents of certain states (including California) may have additional rights under local law, and we honor those requests in accordance with the applicable statute.

7. Children's privacy

ColdOpen is intended for use by sales professionals and is not directed at individuals under 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information, please contact us immediately and we will delete it.

8. Cookies and tracking

For a detailed explanation of how ColdOpen uses cookies and similar technologies, see our Cookie Policy. Cookie preferences may also be managed through your browser settings.

9. Third-party links

ColdOpen may link to external sites or services that we do not operate. We are not responsible for the privacy practices or content of those external sites.

10. International users

The Services are operated from the United States. If you access ColdOpen from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Material changes will be announced via the email associated with your account or a prominent notice within the Services. The "Last updated" date at the top reflects the most recent revision. Continued use after updates constitutes acceptance of the revised policy.

12. Contact us

Awayish LLC. Email: Hello@getcoldopen.com. Phone: (651) 315-8453. Website: getcoldopen.com.