Privacy Policy

Last updated: April 20, 2026

Coldsea LLC ("Coldsea", "we", "us", or "our") operates Coldsea Deploy, a SaaS platform for enterprise Windows deployment automation. We take your privacy seriously. Our business model is simple: we make money by providing a product you pay for, not by selling your data, sharing it with advertisers, or profiling you. This policy explains what we collect, why we collect it, and how we handle it.

1. What We Collect

Account Information

Your email address, name, and hashed password when you register for an account. We never store your password in plaintext.

Organization Data

Organization name, membership records, and role assignments within your organization.

User Content

Workflows, scripts, configurations, and any other content you create or upload to the platform. This data belongs to you.

Usage & Technical Data

Audit logs, IP addresses, browser type, and session tokens necessary to operate and secure the service.

2. How We Use Your Data

We use your data solely to provide, operate, maintain, and improve the Coldsea Deploy service. Specifically:

  • To authenticate you and manage your account
  • To run workflows and execute automation on your behalf
  • To communicate with you about your account and the service
  • To detect, investigate, and prevent security incidents
  • To improve the platform using aggregate, anonymized data, never individual profiling

We do not sell your data. We do not share your data for marketing purposes. We do not profile you for advertising. We do not use tracking pixels or behavioral advertising networks.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area, we process your personal data under the following legal bases:

  • Contract performance: Processing necessary to provide the service you have subscribed to.
  • Legitimate interest: Security monitoring, fraud prevention, and service reliability, balanced against your rights and interests.
  • Consent: Where required by law, we will request your explicit consent before processing.

4. Third-Party Processors

We use infrastructure and hosting providers as sub-processors to operate the service. These providers are contractually bound to process data only on our behalf and in accordance with our instructions.

We do not use advertising networks or data brokers. A current list of our sub-processors is available upon request at privacy@coldsea.io.

5. Data Retention

Your data is retained for as long as your account is active. When you delete your account, we retain your data for a minimum of 30 days as a recovery safety net. You may contact us during this window to restore your account and data.

After the 30-day recovery window closes, your data may be retained or removed at Coldsea's discretion. Legal obligations, such as financial record-keeping requirements, may require us to retain certain data for longer periods regardless of account status.

Coldsea Deploy is not designed or intended for storing sensitive personal data (such as health records, financial account numbers, or government identification). Please do not use the platform for that purpose.

6. Your Rights

Regardless of where you are located, you have the following rights with respect to your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request that we delete your personal data, subject to our retention obligations.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Restriction: Request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at privacy@coldsea.io. We will respond within 30 days.

7. Cookies & Tracking

We use session cookies strictly for authentication purposes. These are essential to the operation of the service and do not require your consent.

We do not use third-party tracking cookies. We do not engage in cross-site tracking. If we introduce analytics in the future, it will be first-party and privacy-respecting, and we will update this policy accordingly.

8. Security

We protect your data using industry-standard measures including:

  • Encryption in transit via TLS
  • Encryption at rest
  • Role-based access control (RBAC) across all data
  • Comprehensive audit logging for security events
  • Regular security reviews

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Coldsea LLC is registered in Georgia, United States. Your data may be processed in the United States or other countries where our infrastructure providers operate. For transfers from the European Economic Area, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for cross-border data transfer.

10. Children

Coldsea Deploy is not directed at individuals under the age of 16, and we do not knowingly collect personal data from anyone under 16. If we become aware that we have collected data from a person under 16, we will delete it promptly. If you believe we may have such data, please contact us at privacy@coldsea.io.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days notice before the changes take effect, via email or a prominent notice on the platform. Your continued use of Coldsea Deploy after the effective date of any changes constitutes acceptance of the updated policy.

The date at the top of this page indicates when this policy was last revised.

12. Contact

For any privacy-related questions, requests, or concerns, contact us at:

privacy@coldsea.io

If you are located in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority.