1. Who We Are
Coldstorm AI (“Coldstorm,” “we,” “us”) is a consulting firm based in Montréal, Canada, providing litigation intelligence, crypto compliance, and AI solutions. Our website is coldstorm.org.
Contact: Makir Volcy — volcy@coldstorm.org — +1 (514) 602-5411
2. Information We Collect
Information you provide
When you submit an inquiry through our contact form or API, we collect:
- Name and email address
- Company name (optional)
- Service interest and project description
- Budget range and timeline (optional)
Information collected automatically
When you visit our website, our web server may log:
- IP address (for rate limiting and security)
- Timestamp of the request
- Pages visited
We do not use cookies, tracking pixels, analytics services (Google Analytics, etc.), or any third-party advertising trackers.
3. How We Use Your Information
- To respond to your inquiry — We use your contact details and project description to evaluate your request and follow up.
- To protect our services — We use IP addresses for rate limiting (10 requests per hour) and security monitoring.
- To send notifications — Inquiry submissions trigger an internal email and messaging notification to our team so we can respond promptly.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage and Security
- Inquiry data is stored in an encrypted database on our secured server infrastructure.
- All data transmission uses TLS 1.3 encryption (HTTPS).
- Server access is restricted to authorized personnel via SSH key authentication.
- We implement input sanitization, rate limiting, and intrusion detection to protect against unauthorized access.
- Our infrastructure undergoes regular security audits.
5. Data Retention
We retain inquiry data for as long as necessary to fulfill the purpose for which it was collected, typically:
- Active inquiries: Until the engagement is completed or the inquiry is closed.
- Completed engagements: Up to 3 years for legal and business record-keeping purposes.
- Security logs: 90 days, then automatically purged.
You may request deletion of your data at any time by contacting us.
6. Third-Party Services
We use the following third-party services:
- Google Fonts — For typography. Google may collect anonymized usage data per their privacy policy.
- Cal.com — For scheduling discovery calls. Subject to Cal.com’s privacy policy.
- Gmail (SMTP) — For sending inquiry confirmation emails.
We do not use any analytics, advertising, or social media tracking services.
7. AI Agent Access
Our website provides machine-readable endpoints (API, discovery files) that AI agents may use to submit inquiries on behalf of their users. These submissions are subject to the same data handling practices described in this policy. AI agent submissions are identified by the optional agent_name field and are subject to the same rate limiting and security protections.
8. Your Rights
Under Canadian privacy law (PIPEDA) and Quebec’s Law 25, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Delete your personal information
- Withdraw consent for future communications
To exercise any of these rights, email volcy@coldstorm.org. We will respond within 30 days.
9. Children’s Privacy
Our services are designed for businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18.
10. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated “last updated” date. Continued use of our website after changes constitutes acceptance of the revised policy.
11. Contact
For questions about this privacy policy or your personal data:
Coldstorm AI
Makir Volcy, Principal Consultant
Montréal, QC, Canada
volcy@coldstorm.org
+1 (514) 602-5411