Privacy for early access

Updated September 17, 2026.

Who manages your data

Merkoly, S.A., Panama, operates ColdSearch and handles requests submitted through this website. Contact us using the contact form for questions about your data.

What we collect and why

We collect your email, your optional description of the contacts you are looking for, the request date and your acceptance of this notice. We use this information to manage your interest in the pilot and related communications. This form does not subscribe you to general marketing campaigns.

Contact inquiries are stored to respond to your message. Do not submit passwords, Instagram sessions or sensitive information.

Storage and access

Requests are stored outside the public website directory on ColdSearch infrastructure hosted in Germany and managed through Laravel Forge. Authorized operator personnel may review them to handle requests. We do not sell these requests.

Hosting and website delivery may process technical connection information, such as IP addresses and server logs. The form uses an IP-derived identifier that changes daily to limit abusive submissions; the requests database does not store the IP address.

Retention

Requests are retained for up to 90 days. Older records are removed during maintenance and when new requests are processed. Hosting logs have their own retention policies.

Your choices

Use the contact form to request access, correction or deletion of your request, or to withdraw consent. State the email you used and the type of request. Verification may be required before changing or disclosing information.

Cookies and analytics

This version does not include advertising analytics or its own tracking cookies. Your language preference is stored in your browser when you choose a language. Sample downloads are generated in your browser and contain fictional data only.

Private pilot workspace

The workspace stores your account label, requested analyses and published contacts found by the engine. Each user can access only their own analyses. The pilot maintenance process deletes analyses after 90 days. Account labels remain until you request deletion. Access uses a single-use invitation and a necessary session cookie that expires after seven days. Instagram sessions are configured outside the website and are never included in exports. You can request deletion of your account and data using the contact form.

Scope

This notice covers the early-access forms and the private pilot workspace. The public demo uses fictional data only.