1. Introduction
Pulse (“we,” “our,” or “us”) operates the Pulse mobile application and web platform (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By accessing or using Pulse, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.
This policy applies to all users of the Pulse application, including the mobile app available on the Apple App Store and Google Play Store, and the web application at pulseapp.ai.
2. Information We Collect
We collect the following categories of information to provide and improve our Service:
2.1 Information You Provide Directly
- Account Information: Phone number, first name, last name, and profile picture when you create an account.
- Workspace Data: Workspace names, channel names, and workspace settings you configure.
- Messages and Content: Text messages, files, and images you send through channels and direct messages within your workspaces.
- Work Items: Tasks, leads, expenses, and notes you create or that are automatically extracted from your conversations.
- Contact Information: Email addresses or phone numbers of people you invite to your workspaces.
2.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type, and unique device identifiers.
- Usage Data: Features used, pages visited, actions taken within the app, timestamps, and session duration.
- Log Data: IP address, access times, error logs, and referring URLs.
- Cookies and Similar Technologies: Session cookies for authentication and maintaining your login state.
2.3 Information from Third Parties
- Authentication Providers: If you authenticate via third-party providers, we may receive your name and email address from those services.
- SMS Verification: We use Twilio to send OTP verification codes. Twilio may process your phone number to deliver these messages.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Service: To create and manage your account, enable messaging, organize workspaces, and deliver real-time notifications.
- AI-Powered Features: To analyze chat messages using artificial intelligence (OpenAI) and automatically extract work items such as tasks, leads, expenses, and notes.
- Communication: To send OTP verification codes, service notifications, and important updates about your account or the Service.
- Improvement and Analytics: To understand how users interact with the Service, identify bugs, improve performance, and develop new features.
- Security: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
4. AI Processing and Automated Decision-Making
Pulse uses artificial intelligence to analyze messages within your workspaces and automatically detect work items (tasks, leads, expenses, and notes). This processing is performed to help your team stay organized without manual data entry.
- AI processing is applied to messages sent within workspace channels and direct messages.
- Messages are sent to OpenAI's API for analysis. OpenAI processes this data according to their own privacy policy and data usage terms.
- Extracted work items are stored in your workspace and are visible to workspace members.
- We do not use your messages or work items to train AI models.
- You can manually edit or delete any AI-extracted work items at any time.
5. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- With Workspace Members: Messages, work items, and profile information are visible to other members of the same workspace.
- Service Providers: We share data with third-party providers who help us operate the Service, including Twilio (SMS delivery), OpenAI (AI-powered message analysis), Neon (database hosting), and our hosting provider.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account Data: Retained for the duration of your account. You may request deletion at any time.
- Messages and Work Items: Retained as long as the workspace exists. Workspace owners can delete messages and work items.
- Session Data: Login sessions expire after 7 days of inactivity.
- Log Data: Server logs are retained for up to 90 days.
After account deletion, we may retain certain information as required by law, but it will be anonymized or deleted within 30 days.
7. Data Security
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission using TLS/SSL.
- Secure session management with httpOnly cookies.
- Server-side validation for all file uploads (type and size restrictions).
- WebSocket token-based authentication to prevent impersonation.
- Rate limiting on authentication endpoints.
- Role-based access controls within workspaces.
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We will notify affected users in the event of a data breach as required by law.
8. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data and account.
- Data Portability: Request a copy of your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw your consent to data processing at any time.
- Opt-Out: Opt out of non-essential communications.
To exercise any of these rights, please contact us at hi@pulseapp.ai.
9. Children's Privacy
Pulse is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at hi@pulseapp.ai.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable law.
11. Third-Party Links and Services
The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- The right to know what personal information we collect, use, and disclose.
- The right to request deletion of your personal information.
- The right to opt-out of the sale of personal information. We do not sell personal information.
- The right to non-discrimination for exercising your privacy rights.
13. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the GDPR:
- Legal Basis: We process your data based on contractual necessity, legitimate interests, and consent.
- Data Protection Officer: For GDPR-related inquiries, contact us at hi@pulseapp.ai.
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Last updated” date.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: