What Cooli keeps, and why.

Short version: four kinds of data exist here, each kept for a stated time, none of it sold, and no advertising trackers anywhere on the site. Anything below can be deleted on request by emailing hello@cooli.ai.

Website inquiries

When you fill in a form on this site, what you typed is stored: your name if you gave one, your business name, your email, your phone number if you entered one, the kind of business, your question, the page you submitted from, and the fact that you ticked the box permitting a reply.

It is stored in Cloudflare D1, the database behind this site, and kept for 180 days if it does not turn into a customer, then deleted. If you become a customer, it becomes part of your account record instead.

The inquiry is also emailed to our team through Resend, the email service Cooli sends through, so it lands in a human inbox. Ticking the consent box means we may reply to that inquiry. It is not enrollment in marketing, and you are not added to any list.

Form contents are never put into analytics of any kind.

Demo messages

The demo on cooli.ai/demo is a real conversation, not a script. What you type is sent to a model provider so it can generate the reply, and the running conversation stays in your browser tab for as long as you have it open.

Demo messages are not stored beyond the session. Nothing you type into the demo is written to a database, attached to a lead, or uploaded when you later fill in a form. Closing the tab ends it.

Do not put anything sensitive into the demo. It is a sample business with sample facts, and the messages pass through a third-party model provider to get a reply.

Customer conversations on a client's line

When Cooli runs the text line for a local business, the conversations between that business's customers and the line are stored for that business, so the owner can read them, answer them, and take a conversation over.

• What is stored: the customer's phone number, the messages in the conversation, timestamps, and whether a person took over.
• Retention: 90 days by default, then deleted. A business can ask for a shorter window.
• Who can read it: the business it belongs to, and Cooli's team when operating or repairing the service. One client cannot see another client's conversations.
• Delivery: messages are carried by the SMS provider on that line, which necessarily sees the phone number and the message in order to deliver it.
• Replies: generated by a model provider from the facts the business owner approved, or typed by a person at the business.
• Opt-out: a customer who replies STOP is suppressed on that line and receives nothing further. See the text message terms.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Opt-in and consent data are never shared and never sold.

Account access

A client business signs in to read its own conversations and change its own facts. Sign-in exists to keep one business's customer conversations away from every other business. Account records are kept while the account is open, and deleted on request when it closes.

Measurement, trackers, and browser storage

There are no advertising trackers on this site. No Google Analytics, no Meta Pixel, no ad networks, no third-party analytics, no cross-site profile, and nothing sold or shared.

What exists is an anonymous count of page views, with no cookie: a number of visits per page, with no identifier that follows you between pages or visits, nothing tied to you, and nothing to delete.

Browser storage is used only to remember whether you chose light or dark mode on this device, under the key cooli_theme. That is the only preference stored, it never leaves your browser, and clearing your site data removes it.

There is no storage consent banner on this site, because there is nothing to consent to beyond that preference.

The only cookies are Cloudflare's, which are strictly necessary to serve the site and protect it from abuse.

Rate limiting and abuse

To stop forms being used for spam, a short-lived keyed hash of the requesting IP address is used as a rate-limit bucket and kept for 24 hours. Raw IP addresses are not stored. Delivery error metadata from failed notifications is kept for 30 days.

Outreach email

Cooli sends a small volume of business-to-business email to local businesses. If you received one:

• Opens and link clicks are recorded as a message id, a timestamp, the mail client's user agent, and a two-letter country code. Your IP address is not stored.
• Recipients in the EU, EEA, UK, and Switzerland are not tracked at all: images and links work, nothing is logged.
• That engagement data is deleted after 90 days.
• Reply with "unsubscribe," or email hello@cooli.ai, and the address is removed from future sends.

Who processes what

• Cloudflare: hosting, the D1 database that holds inquiries, and security.
• Resend: transactional and notification email.
• A model provider: generates demo replies and the replies on a client's line, from the message and the approved facts.
• The SMS provider on a client line: carries the messages to and from the customer's phone.
• The booking system a business already uses, where a booking connection was set up during install.

Nothing here is an advertising network, and none of them are given your data for their own marketing.

Deletion and questions

Email hello@cooli.ai and ask. Deletion requests are handled by a person on our team. A customer on a client's text line can also ask the business directly, and the business can have the conversation deleted.

The text message terms, including opt-in and STOP handling, are on the text message terms page.