Privacy policy
Updated 26 October 2026Who is responsible
Paulin Martin EI / TSC operates Cold Email AI and is responsible for its processing of personal data. For questions, access, correction or deletion requests, contact contact@emaillist.ai.
Data used for the service
The private application processes the account identity used to sign in, connected mailbox addresses and authorization tokens, campaign settings, imported contact details, message content provided for sending, delivery outcomes and reply references. Optional click and open tracking can create campaign events. These signals can be generated by automated email protections and do not prove human activity.
Google access
When a mailbox owner authorizes the connection, gmail.send is used to submit campaign messages from that mailbox. gmail.readonly is used to detect replies and delivery reports, maintain conversation references and stop follow-ups. We request only the permissions implemented by the service. You can revoke access in your Google Account permissions. Revoking access prevents future authorized access; it does not recall messages already sent.
Optional AI processing
AI replies are in private beta. Enabling AI requires a separate, visible affirmative choice in the campaign. The relevant incoming reply, limited recent conversation context, the campaign messages already sent and your approved commercial brief can be sent to Anthropic to select a response action. This does not give the model access to your entire mailbox. We do not use Google user data to train general-purpose models or for advertising. Validation includes synthetic messages and explicitly authorized exchanges between controlled test mailboxes. Incoming reply text stored for AI review is encrypted and retained for up to seven days.
Purpose and recipients
Data is used to operate the requested campaigns, authenticate accounts, apply sending limits, detect stopping events and troubleshoot failures. It is not sold to data brokers or used to serve ads. The service uses infrastructure supplied by Cloudflare, OpenAI Sites and controlled server hosting; Anthropic is used only for enabled AI features and synthetic evaluations. The private operator interface uses ChatGPT sign-in; the customer pilot uses verified email accounts with a password and secure session cookies. Providers may process data outside your country under their applicable contractual safeguards.
Retention and deletion
Campaign and connection data is kept while needed to operate the active pilot space. TSC handles account closure and deletion requests through the support address. Authorization tokens can be revoked immediately with the email provider. Protected backups and operational records are handled separately from the active account and may require a separate deletion or retention review; no instant backup erasure is promised. A final commercial retention schedule will be published before paid onboarding.
Security and access
Authorization credentials are encrypted in the application database and are not included in browser code. Public transport uses HTTPS. Access to an individual client’s records is checked by the service. Human access to Google data is limited to the user’s explicit, specific consent, necessary security investigations or legal obligations.
Google Limited Use
Cold Email AI’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace API User Data and Developer Policy.
Cookies and this website
This public presentation uses no advertising cookies or analytics scripts. The application and its sign-in provider use the technical mechanisms needed for authentication and security. A visitor can browse this presentation without connecting a mailbox.
Your rights
Depending on applicable law, you can request access, correction, deletion, restriction or portability and object to certain processing. You may also contact the competent data protection authority, including the CNIL in France. We may request proportionate information to verify a request without asking for your mailbox password.