Privacy Policy

1. Who We Are

coldsea (“we,” “us,” or “our”) is a professional networking platform available at coldsea.net. For questions about this policy, contact us at privacy@coldsea.net.

2. Information We Collect

Information you provide directly

• Account information: your name, email address, username (handle), headline, bio, and profile photo when you register or update your profile.
• Content: posts, comments, replies, and any media (images, files) you upload to the platform.
• Connection data: who you follow, who follows you, follow requests you send or receive, and companies you are associated with.
• Communications: messages or reports you send to us directly (e.g., support requests).

Information collected automatically

• Authentication data: session tokens and login timestamps managed by our authentication provider (Supabase).
• Log data: IP address, browser type, and pages accessed, retained for security purposes for up to 90 days.
• Functional cookies: a single session cookie required to keep you logged in. We do not use advertising or tracking cookies. See our Cookie Policy for details.

Information we do not collect

• We do not collect or infer demographic data for advertising purposes.
• We do not build behavioural profiles or track you across other websites.
• We do not collect payment information — there is currently no paid tier.

3. How We Use Your Information

We use the information we collect solely to:

• Provide, operate, and improve the coldsea platform.
• Authenticate your identity and maintain the security of your account.
• Deliver notifications you have opted into (likes, comments, follows, follow requests).
• Send transactional emails such as email verification and password reset links.
• Display your profile and content to other users as directed by your privacy settings (public or private account).
• Investigate and respond to reports of abuse, spam, or policy violations.
• Comply with applicable legal obligations.

We do not use your information to serve advertisements, retarget you on other platforms, or train third-party AI models.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service providers: we use the following sub-processors to operate the platform. Each is bound by data processing agreements:
  • Supabase — database hosting and user authentication.
  • Amazon Web Services (S3 / CloudFront) — media file storage and delivery.
  • Resend — transactional email delivery (e.g., email verification).
• Legal requirements: we may disclose information if required by law, court order, or to protect the rights and safety of users or the public.
• Business transfers: if coldsea is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify affected users in advance.

5. Your Privacy Settings

You have direct control over the visibility of your content:

• Public account: your profile and posts are visible to all coldsea users.
• Private account: your posts are only visible to approved followers. Others must send a follow request that you can approve or decline.
• Blocking: you can block any user. Blocked users cannot view your profile or posts and will not appear in your feed or suggestions.

These settings can be changed at any time in your account settings.

6. Data Retention

• Your account data and content are retained for as long as your account is active.
• If you delete your account, your profile, posts, and personal data will be permanently deleted within 30 days, except where we are required to retain it by law or for legitimate security purposes.
• Anonymised or aggregated data (e.g., total post counts) that cannot be used to identify you may be retained indefinitely.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete data via your profile settings at any time.
• Deletion: request permanent deletion of your account and associated data.
• Portability: request an export of your data in a machine-readable format.
• Objection: object to certain processing of your data where we rely on legitimate interest as our legal basis.
• Restriction: request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at privacy@coldsea.net. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage of credentials, and row-level security on our database so each user can only access their own data. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

9. Children’s Privacy

coldsea is not directed at children under 16 years of age. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

10. International Transfers

Our service providers may process your data in countries outside your own, including the United States and the European Economic Area. Where required, we rely on standard contractual clauses or equivalent safeguards to protect data transferred internationally.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or an in-app notice at least 14 days before the changes take effect. The “last updated” date at the top of this page reflects the most recent revision. Continued use of coldsea after changes take effect constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests, please contact us at privacy@coldsea.net.