Disclosure
Coldspur writes outbound and Monday report copy with AI, but every cold-outbound draft sits in a human-in-the-loop review queue for Team and Scale accounts — and every message we send on your behalf follows CAN-SPAM, GDPR, and (where applicable) the EU AI Act.
We generate four kinds of copy: cold outbound drafts, weekly Monday report copy, rubric rationale text shown next to the score, and on-page example posts on /channels. Every one of them is drafted against your active ICP rubric — industry, headcount band, role keywords, spend floor — not against a randomised prompt.
What we do NOT generate: subject lines from a randomised prompt. Subject lines are pulled from the prospect context the agent already has (their industry and the rubric criterion they matched), or written by the human reviewer.
Team and Scale accounts route every cold-outbound draft through the human-in-the-loop review queue before it goes out. The Monday report names how many drafts were approved and how many were auto-sent after their HITL window expired. Solo accounts opt into the same queue under /settings/hitl.
Every message Coldspur sends on your behalf includes a truthful header (your name or your company's, never a deceptive one), a physical postal address (the one on your /settings/profile), and a one-click unsubscribe link that fires inside the polite-message window defined in your rubric. We do not buy or rent lists; sourced contacts are graded against your active rubric and only kept if they pass.
Coldspur is the data processor; you (the workspace owner) are the data controller. We process inbound message metadata only to compute the score, draft the response, and route the thread — never for marketing. The lawful basis you sign up under is on /settings/compliance. Every recipient has a right-to-erasure request flow: the /api/erasure endpoint deletes their message rows and dismisses pending drafts within 30 days; we acknowledge the request within 7 days and reply on the contact channel you logged with us.
For the small subset of workspaces in EU scope, Coldspur acts as the deployer of the generative system that drafts outbound copy. The model providers and model names we route through are documented at /disclosure/providers (a public list updated by our security team). We retain the prompt, the model version, and a coarse reasoning trace for every auto-sent draft for the period defined by your data-retention plan; human-in-the-loop approved drafts follow the same ledger.