Privacy Policy
Last updated: April 1, 2026
1. Information We Collect
We collect information you provide when creating an account (name, email, company), employee data you add to the platform (profiles, leave records, performance reviews), and usage analytics (page views, feature usage). We do not collect data from third parties without your consent.
2. How We Use Your Data
Your data is used solely to provide and improve the Pulse platform. We use it to deliver HR features (directory, leave, reviews), send transactional emails (invitations, approvals), generate aggregated analytics, and provide customer support.
3. Data Storage & Security
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). We host on a cloud infrastructure provider with multi-AZ redundancy. Access is controlled via role-based permissions with audit logging. We conduct annual SOC 2 Type II audits.
4. Data Sharing
We do not sell your data. We share data only with sub-processors required to deliver the service (e.g., [CUSTOMISE: your cloud provider] for hosting, [CUSTOMISE: your payment processor] for billing). A full sub-processor list is available on request.
5. Your Rights (GDPR)
You have the right to access your personal data, the right to rectify inaccurate data, the right to delete your data, the right to restrict processing, the right to data portability, the right to object to processing, the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects (GDPR Art. 22; you may request human review, contest the decision, and express your point of view), and the right to lodge a complaint with a supervisory authority. You may withdraw consent at any time. To exercise these rights, email privacy@usepulse.app. We respond within 30 days.
6. Do Not Track and Global Privacy Control
We honour Global Privacy Control (GPC) where legally required. We do not currently respond to Do Not Track (DNT) browser signals because no common technical standard defines how websites should interpret them.
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently erased within 30 days. Audit logs are retained for 7 years as required by compliance standards.
8. Cookies
We use essential cookies for authentication and session management. We use analytics cookies (opt-in only) to understand feature usage. You can manage cookie preferences in your account settings.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email and in-app notification at least 30 days before they take effect.
Questions? Email privacy@usepulse.app