Privacy Policy

• Contacts/Leads: Imported from your CSV files (names, phone numbers, emails, tags, notes, call index), stored locally for in‑app use

• Calendar Events: If you opt to add an event, the app requests calendar permission to create it on your device. If permission is denied, an iCal file export is offered instead

• Diagnostics: Lightweight logs are kept locally for troubleshooting and are never transmitted

• Calendar: Needed only when you create follow‑up events

• Phone/Messages/WhatsApp: When you initiate a call or message, the app opens the respective system app or WhatsApp via its URL scheme; their own privacy policies apply

If you choose to connect your Google Account, Cold Call X may request limited Google OAuth scopes to enable optional features:

• Google Drive (read‑only): Allows you to browse and select files you own or have access to.
• Google Sheets (read‑only): Allows the app to read selected spreadsheet content you choose to import for call lists.

How we use Google data: Only to display and import the specific files/spreadsheets you explicitly select. We do not write, delete, or modify your Google Drive or Sheets content.

Storage: We do not copy or persist the contents of your Drive files or Sheets on our servers. Imported rows you confirm to use are stored locally on your device for in‑app functionality. OAuth tokens (if present) are stored only on your device in secure storage and are transmitted over HTTPS.

Sharing & human access: We do not share Google user data with third parties. No human reads your Google data unless you request support and provide explicit, time‑bound consent and access for troubleshooting.

Compliance: We comply with the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, profiling, or sold.

We implement industry‑standard security measures to protect information:

• Encryption in transit: All communications with Google APIs occur over HTTPS/TLS.
• At‑rest protection: Any locally stored data and tokens are kept in the device’s secure storage (e.g., Keychain/Keystore). We do not store Google file contents on our servers.
• Least privilege: We request only read‑only scopes and access only files you select.
• Access controls: No third‑party access; no human access without your explicit, time‑bound consent for support.

You may revoke Cold Call X’s access to your Google Account at any time from your Google Account settings at myaccount.google.com/permissions. If you revoke access, OAuth tokens on your device become invalid and the app will no longer be able to read your files.

Because we do not store Google Drive or Sheets content on our servers, there is no server‑side copy to delete. To remove imported data stored on your device, use the in‑app delete options or uninstall the app. You can also email us at support@coldcallx.app for assistance.