Privacy Policy

1. Introduction

Pulse ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information when you use our website at pulse-rose-eta.vercel.app and our Service. By using Pulse, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: When you sign in via Slack OAuth, we receive your email address, display name, Slack user ID, and workspace information (team ID, team name).
• Product information: Product names, descriptions, URLs, keywords, and subreddit preferences you configure in the Service.
• Feedback and communications: Messages you send us, draft feedback, and revision requests submitted through the Service.

2.2 Information We Collect Automatically

• Slack workspace data: Bot tokens, channel IDs, and message metadata required to deliver drafts and notifications to your Slack workspace.
• Reddit public data: We access publicly available Reddit posts, comments, and metadata through Reddit's API. We do not access private or restricted Reddit content.
• Usage data: Pages visited, features used, draft approval/rejection actions, and interaction timestamps.
• Device and browser information: IP address, browser type, operating system, and referral URLs collected via standard web server logs.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Monitor Reddit for conversations relevant to your configured products
• Generate AI-drafted replies and deliver them to your Slack workspace
• Learn from your feedback to improve draft quality over time
• Process billing and manage your subscription
• Send transactional emails and service notifications
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate Pulse. Each service has its own privacy policy governing its use of your data:

• Supabase: Database hosting, authentication, and data storage. Your account data and workspace configurations are stored in Supabase-hosted PostgreSQL databases.
• Slack: Workspace integration for delivering drafts and receiving feedback. We store bot tokens securely and only access channels where Pulse is installed.
• OpenRouter / AI providers: We send Reddit post content and your product descriptions to AI language model providers (via OpenRouter) for classification and draft generation. We do not send your personal information to AI providers.
• Stripe: Payment processing for paid subscriptions. Stripe collects and processes your payment information directly. We do not store credit card numbers.
• Vercel: Web application hosting and deployment.

5. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand how the Service is used. We do not sell your data to advertisers or use third-party advertising trackers. You can configure your browser to reject cookies, though some features of the Service may not function properly without them.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Draft data and activity logs are retained for up to 12 months after creation. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encryption at rest, secure token storage, and row-level security policies in our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain processing of your data.
• Withdrawal of consent: Withdraw consent where processing is based on your consent.

To exercise any of these rights, contact us at support@appeneure.com. We will respond within 30 days.

9. Children's Privacy

Pulse is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete that information promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your data to these countries. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@appeneure.com.