← ColdFront Studio

Privacy Policy

Last updated: October 2026

This Privacy Policy explains how ColdFront Studio ("we," "us," "our"), operated by Krish Nayak, collects, uses, and protects information in connection with customer onboarding, website setup, our missed-call text-back service, and related communications, including SMS/text messaging.

Information we collect

When you call or text a phone number operated by ColdFront Studio (including numbers used on behalf of our client businesses), we may collect:

How we use your information

We use the information we collect to:

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

SMS messaging

By calling a phone number operated by ColdFront Studio, you consent to receive a text message reply. Message frequency varies based on your conversation. Message and data rates may apply. Reply STOP at any time to opt out of further messages, or reply HELP for assistance.

Data retention and security

We retain message and call logs only as long as reasonably necessary to provide our service and for basic record-keeping. We take reasonable measures to protect the information we collect from unauthorized access or disclosure.

Customer onboarding and uploaded files

When you complete customer onboarding, we collect the business, contact, phone setup, service area, scheduling, website preferences, approved AI instructions, and optional images or reviews you provide. We also record your authorization, submission reference, and Stripe checkout identifiers needed to verify eligibility and associate your submission with your purchase.

Cloudflare hosts the onboarding form and forwards requests securely. Supabase provides server processing, private submission records, and private image storage. Google Gmail sends sign-in codes and submission notifications. Stripe verifies checkout and subscription status. We do not collect payment-card details or calendar passwords through this form. Onboarding does not connect Twilio, Claude, or your calendar automatically.

Uploaded images are checked and converted to WebP; embedded image metadata is removed. Files are not published through the onboarding form. Access to saved submissions and file downloads requires an authorized sign-in. Notification emails contain a submission reference and a sign-in link, rather than your answers or attachments.

Draft answers may be saved in your browser tab until submission or until you clear them. Sign-in codes expire after 15 minutes. Unsubmitted uploads are eligible for deletion after 48 hours. We retain submitted setup details and approved files while needed to deliver your services and handle reasonable record-keeping needs; contact us to request access, correction, or deletion.

Contact us

If you have questions about this Privacy Policy or want your information removed, contact us at nayakkrish668@gmail.com.