The Creepiness Spectrum
Personalization in cold email exists on a spectrum. On one end: "I saw your company just raised a Series A - congratulations." On the other end: "I saw your vacation photos from Cabo last week - looks like you had fun." Both are personal. One builds trust. The other builds fear.
The line between thoughtful and invasive is not always obvious - but it exists, and crossing it can damage your brand, trigger spam complaints, and even create legal liability. Understanding where the line is matters.
The Public/Private Framework
A simple rule: if the information is public and professional, it is fair game. If it is private or personal, it is off-limits.
Fair Game (Public + Professional)
- Company blog posts, press releases, and public announcements
- LinkedIn posts and professional activity
- Podcast appearances and public speaking engagements
- Job postings and team expansion announcements
- Funding rounds and M&A activity
- Conference attendance and industry awards
- Published case studies and company milestones
These are things the prospect has chosen to make public. Referencing them shows you did your research without overstepping.
Off-Limits (Private or Personal)
- Personal social media posts (Instagram, Facebook, personal Twitter)
- Family details, relationship status, or personal life events
- Private LinkedIn activity (posts only visible to connections)
- Information from paid databases or scraped private profiles
- Physical location tracking or office visits
- Personal email content or private messages
Even if you can access this information, using it in a cold email crosses the trust boundary. The prospect did not consent to you using their personal data for outreach.
The "Newspaper Test"
Before using a personalization detail, ask: "Would this feel appropriate if it appeared in a newspaper article about how I found the prospect?" If the answer is no, do not use it. This test forces you to consider how the prospect would feel if they knew how you obtained the information.
"I saw your LinkedIn post about hiring" passes the newspaper test. "I noticed you were at the same conference as me last week" passes if the conference was public. "I saw your Instagram post from last weekend" does not pass.
When in Doubt, Default to Company
If you are unsure whether a detail is appropriate, default to company-level personalization rather than individual-level. Company news, public statements, and professional milestones are always safe. Individual personal details - even public ones - require more judgment.
A safe hierarchy: company activity > professional content > public role > individual activity. The further you move toward the individual, the more carefully you should vet the appropriateness.
The goal of personalization is to show relevance, not surveillance. If the prospect would feel impressed that you noticed, it is good personalization. If they would feel watched, it is not.
Our done-for-you cold email service keeps personalization professional and public-signal-based as a matter of process, not just policy.
Frequently asked questions
What personal information can you use in a cold email?
Use information that is public and professional: company blog posts, press releases, LinkedIn posts and professional activity, podcast appearances, job postings, funding rounds, conference attendance, awards and published case studies. These are things the prospect chose to make public, so referencing them shows you did your research without overstepping.
What personalization is off-limits in cold email?
Anything private or personal: personal social media posts, family details or relationship status, private LinkedIn activity, information from paid databases or scraped private profiles, location tracking or office visits, and personal email content. Even if you can access it, using it crosses the trust boundary because the prospect did not consent to it.
What is the newspaper test for cold email personalization?
Before using a detail, ask whether it would feel appropriate if it appeared in a newspaper article about how you found the prospect. If the answer is no, do not use it. 'I saw your LinkedIn post about hiring' passes, while 'I saw your Instagram post from last weekend' does not.
How do you know when cold email personalization is too creepy?
The goal is to show relevance, not surveillance. If the prospect would feel impressed that you noticed, it is good personalization; if they would feel watched, it is not. When unsure, default to company-level personalization, following the hierarchy of company activity, professional content, public role, then individual activity.