Privacy Policy

Last updated: March 2, 2026

1. Introduction

Bomerang LLC ("we," "us," or "our") operates ColdDMGenerator.io ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Email address: When you upgrade to a paid plan or contact us.
  • Payment information: Processed securely by our third-party payment processor. We do not store your credit card details.
  • Input data: Niche, goal, platform preferences, and offer descriptions you enter when generating messages.

2.2 Information Collected Automatically

  • Usage data: Number of generates, messages created, features used.
  • Device information: Browser type, operating system, screen resolution.
  • Log data: IP address, access times, pages viewed, referring URLs.
  • Local storage: We use browser localStorage to store your credits, preferences, and generated messages locally on your device.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service.
  • Process transactions and manage your subscription.
  • Track credit usage and enforce plan limits.
  • Send transactional emails (receipts, account updates, plan changes).
  • Analyze usage patterns to improve our message generation engine.
  • Respond to customer support requests.
  • Detect and prevent fraud or abuse of the Service.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Storage & Security

  • Generated messages and preferences are stored locally in your browser (localStorage) and optionally in our secure database.
  • We use industry-standard security measures including HTTPS encryption, secure API endpoints, and access controls.
  • Payment data is handled entirely by our PCI-compliant payment processor — we never see or store your full card details.
  • While we implement reasonable security measures, no method of electronic storage is 100% secure.

5. Third-Party Services

We use the following third-party services that may collect data:

  • Payment Processor: To handle subscriptions and billing securely.
  • Hosting Provider: To serve and deliver the website.
  • Analytics: To understand how users interact with the Service (anonymized where possible).

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

6. Cookies & Local Storage

  • We primarily use localStorage (not cookies) to store your preferences, credits, and generated messages on your device.
  • Third-party services may use cookies for analytics and payment processing.
  • You can clear localStorage at any time through your browser settings, which will reset your credits and message history.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request your data in a structured, machine-readable format.
  • Opt-out: Unsubscribe from marketing communications at any time.

To exercise any of these rights, contact us at support@bomerang.io. We will respond within 30 days.

8. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

  • Contract: Processing necessary to provide the Service you requested.
  • Legitimate interest: Improving and securing our Service.
  • Consent: Where you have given explicit consent for specific processing.

9. Data Retention

  • We retain your account data for as long as your account is active or as needed to provide the Service.
  • If you cancel your subscription, we retain your data for 90 days before deletion, allowing you to reactivate.
  • Anonymized usage data may be retained indefinitely for analytics purposes.
  • You may request immediate deletion by contacting us.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Material changes will be communicated to paid subscribers via email.

12. Contact Us

For any questions or concerns about this Privacy Policy, contact us at: