Privacy Policy

This policy explains what personal data Pulse collects, why, who we share it with and the choices you have. It covers the people who use Pulse, the visitors to our own website, and the subscribers who get notifications from websites that use Pulse. We do not sell personal data.

1. Who is responsible

Pulse is built and run by Pylogix, 1717 Saint James Place #628, Houston, TX 77056, United States, with a second office at 346 Kensington High Street, London W14 8NS, United Kingdom.

Pylogix is the controller for Pulse account data and for data about visitors to the Pulse website. When a website uses Pulse to send notifications, the owner of that website is the controller of its subscribers' data, and we process that data on the owner's behalf.

2. What we collect

If you have a Pulse account

Your name, email address and password when you sign up. We store passwords as a secure hash, never as plain text. We also keep your preferences, plan, the websites you add, and the campaigns, flows, segments and other content you create. Each time you sign in, we record the IP address, device type, operating system, browser and approximate location, to protect your account and investigate abuse.

If you subscribe to notifications from a website that uses Pulse

When you click Allow, your browser creates a push subscription. We store:

the push subscription endpoint and keys, which let notifications reach your browser
your IP address and the approximate location worked out from it (city, country and continent)
your device type, operating system, browser and browser language
the page where you subscribed
any custom details the website owner chooses to attach, such as a name
which notifications were sent, displayed, clicked or closed, and when, including the IP address recorded with each event

If you visit the Pulse website

Basic technical data your browser sends, such as IP address and browser type, and the analytics described in section 5. If you choose to allow notifications from the Pulse website itself, we store the same subscription details listed above.

Messages

If you contact us, we keep your message and our reply.

3. How we use it

to run your account and deliver the notifications you create
to deliver notifications to subscribers on behalf of the website they subscribed to
to show website owners statistics about their campaigns and subscribers
to send service emails, such as account confirmation, password resets and important notices
to keep Pulse secure, stop spam and abuse, and enforce our Terms of Service
to understand how people use our own website, so we can improve it
to meet our legal obligations

We do not sell personal data, and we do not use subscriber data for our own marketing.

4. Legal bases (UK and EU)

If you are in the United Kingdom or the European Union, we rely on these legal bases: contract, to provide the service to account holders. Legitimate interests, to keep the service secure, prevent abuse and improve our website. Consent, for notifications from the Pulse website and where the law requires it for cookies. Legal obligation, where we must keep or share data by law. For subscribers of other websites, the website owner decides the legal basis, which is usually the consent given by clicking Allow.

5. Cookies

Cookies we need

These keep the service working and cannot be switched off: a session cookie that keeps you signed in, "remember me" cookies if you choose to stay signed in, cookies that remember your language and currency, cookies that slow down repeated failed sign-in or sign-up attempts, and a referral cookie if you arrive through a referral link.

Analytics on our website

We use Microsoft Clarity on the Pulse website to see how people use it, for example which pages they open, where they click and how far they scroll. Clarity uses cookies and Microsoft processes this data under its own privacy terms.

The Pulse script that website owners add to their own sites stores what it needs in the browser to manage the subscription. It does not add Clarity or any advertising tracking to those sites.

You can block or delete cookies in your browser settings. If you block the cookies we need, you will not be able to sign in.

We only share personal data with companies that help us run Pulse, and only as much as they need:

Browser push services. Notifications travel through the push service of the subscriber's browser, run by companies such as Google, Mozilla, Apple and Microsoft. They receive the notification and the subscription endpoint so they can deliver it. The content of each notification is encrypted on the way.
Hosting. Our servers and email run on infrastructure we manage with our hosting provider.
Cloudflare sits in front of our website to keep it fast and protect it from attacks, so it handles the traffic to and from the site.
Microsoft provides Clarity analytics for our website.
Google Fonts serves the fonts on our website, so Google receives your IP address when the fonts load.
Gravatar (Automattic) shows your profile picture when you are signed in. It receives a scrambled version of your email address, not the address itself.
Website owners can see the data of their own subscribers in their Pulse dashboard.

We may also share data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.

7. International transfers

Pylogix works from the United States and the United Kingdom, and our providers may process data in other countries. When UK or EU law requires it, we use recognized safeguards for these transfers, such as standard contractual clauses.

8. How long we keep data

Account data and content are kept while your account is open. When you delete your account, we delete them from our live systems. Copies in backups are overwritten on a regular cycle.
Subscriber data is kept until the subscriber unsubscribes or blocks notifications, the subscription stops working, or the website owner deletes it or their website.
Sign-in and delivery records are kept as long as they are needed to run the service, show statistics and investigate abuse.
Messages are kept as long as we need them to deal with your request.

9. Your rights and choices

You can stop notifications at any time by clicking Block or turning notifications off for that website in your browser settings. Account holders can see and correct most of their data in their account settings and can delete their account at any time.

You can also ask us to give you a copy of your personal data, correct or delete it, limit or stop how we use it, send it to you in a format you can move elsewhere, or withdraw consent you have given. If you are a subscriber of another website, we will pass your request to that website's owner or help them answer it.

If you live in California or another US state with a privacy law, you have the right to know what we collect, to correct it, to delete it and to opt out of its sale or sharing. We do not sell personal data or share it for cross-context behavioral advertising, and we will never treat you differently for using your rights.

To make a request, contact us through our contact page. We may need to confirm your identity first. In the UK you can also complain to the Information Commissioner's Office, and in the EU to your local data protection authority.

10. Children

Pulse accounts are for adults running websites. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it.

11. How we protect data

We use encrypted connections, encrypt notification content in transit to push services, store passwords as secure hashes, limit who can access our systems and offer two-factor authentication for accounts. No online service can promise perfect security, so please use a strong, unique password.

12. Changes to this policy

We will update this policy when our service or the law changes. If a change is significant, we will tell account holders by email or in the app before it takes effect.

13. Contact us

Questions about privacy or your data? Send us a message through our contact page and a person will reply.