Privacy Policy
How Defrost handles personal data across the website, waitlist, and authorized product access.
On this page
Scope and roles
This notice explains how DEFROST LLC (“Defrost,” “we,” or “us”) handles personal data through its website, waitlist, and authorized product access.
We act as a controller for website visitors, waitlist participants, and account administration. When a customer directs Defrost to process business contact data for outreach, the customer determines the purpose and lawful basis and Defrost acts as its processor under the applicable agreement.
Data categories and sources
Depending on how Defrost is used, the platform may handle:
- Contact and account information supplied by a visitor or customer.
- Workspace settings, campaign inputs, and customer-provided content.
- Business contact information and professional context obtained from customer instructions and publicly available business sources.
- Verification results, campaign events, support messages, and security records.
- Device, browser, and service-use information needed to operate the service.
Defrost is designed for business outreach. Customers must not direct the platform to collect sensitive personal data or consumer contact lists.
Purposes and legal bases
We use personal data to administer the waitlist, provide authorized product access, secure accounts, operate requested workflows, verify business contact information, respond to support and rights requests, and meet legal obligations.
Our legal basis depends on the relationship and jurisdiction and may include contract performance, legitimate interests, consent, or legal obligation. Customers are responsible for identifying and documenting the legal basis for their outreach and instructions to Defrost.
Retention
We retain personal data only for an approved business or legal purpose. Retention varies by record type, account state, customer instruction, and legal obligation. Production deletion jobs exist for designated records, but the complete launch retention schedule and production evidence remain subject to operator validation and counsel review.
A customer instruction to delete data may be limited by legal retention, security, fraud-prevention, or backup constraints that apply to the record.
Rights and choices
Depending on applicable law, a person may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data. A person may also have a right to complain to a data protection authority.
Submit a request to privacy@defrostmail.com. We may need to verify identity and authority. If Defrost handles the data only for a customer, we may refer the request to that customer or assist it under the applicable agreement.
International transfers
Defrost and its service providers may process data outside the place where a person lives. Before this revision may be published, operator evidence and counsel must confirm the launch processing locations and the transfer mechanism applicable to each restricted transfer.
Security and children
Defrost uses tenant-scoped access controls and encrypts supported credentials at rest. No security measure eliminates every risk. See our Security page for the review status of additional statements.
Defrost is a business service and is not directed to children. Do not submit information about a child through the service. Contact us if you believe that has occurred.
Changes and contact
We will identify the current effective version on this page. Material revisions follow the approved policy-change process before they take effect. This draft does not replace the current effective version while counsel review remains pending.
Questions and privacy requests may be sent to privacy@defrostmail.com.
