Legal

Privacy Policy

How Pulse collects, uses and protects your personal data.

Last updated

1. Who we are

Pulse is operated by TODO: registered company name (or your full name if sole trader), TODO: street, postal code, city, TODO: country ("we", "us"). We are the data controller for the personal data described in this policy.

For any privacy question, contact us at contact@launch-now.dev.

When you use Pulse on behalf of an organization, that organization is the controller of the content it stores in Pulse, and we act as its processor under our Data Processing Agreement.

2. Data we collect

CategoryExamplesSource
Account dataName, email address, profile pictureYou
Authentication dataSign-in method, one-time codes, two-factor settings, linked GitHub or Google account identifiersYou, GitHub, Google
Organization dataOrganization name and logo, members, roles, invitationsYou and your teammates
Billing dataPlan, invoices, billing address. Card details are handled by Stripe and never reach our serversYou, Stripe
ContentData you create in the product, feedback you send usYou
Technical dataIP address, browser and device, session history, security logsAutomatically

3. Why we use it and on what legal basis

PurposeLegal basis (GDPR art. 6)
Create and secure your account, provide the servicePerformance of a contract
Process payments, issue invoices, keep accounting recordsContract and legal obligation
Send transactional emails (sign-in codes, invitations, billing)Performance of a contract
Prevent fraud and abuse, keep security logsLegitimate interest
Improve the product from aggregated usage and feedbackLegitimate interest
Answer your requests to supportLegitimate interest

We do not use your data for automated decision-making that produces legal effects, and we do not sell your personal data.

4. Who we share it with

We share personal data only with service providers that help us run the service, under contracts that require them to protect it:

ProviderPurposeLocation
NeonDatabase hostingTODO: region of your Neon project
StripePayment processing and invoicingUnited States
ResendTransactional emails (sign-in codes, invitations) and newsletter (with consent)United States
Neon (object storage)File storage (avatars, organization logos)United States (us-east-2)
GitHubOptional sign-in with GitHubUnited States
GoogleOptional sign-in with GoogleUnited States

We may also disclose data when required by law, to protect our rights, or as part of a merger or acquisition, in which case you will be informed.

5. International transfers

Some providers process data outside the European Economic Area. When they do, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Account and organization data: as long as your account exists.
  • After you delete your account, data is removed from our live systems right away and from backups within 30 days.
  • Security and access logs: 90 days.
  • Invoices and accounting records: as long as tax law requires (typically 10 years in France).

7. Your rights (EEA, UK and Switzerland)

You can access, correct, delete or export your data, restrict or object to its processing, and withdraw consent at any time. Most of this is available from your account settings; otherwise email us.

We answer within one month. You can also lodge a complaint with your data protection authority, for us TODO: e.g. CNIL (www.cnil.fr).

8. California residents (CCPA/CPRA)

In the last 12 months we collected the categories listed above (identifiers, commercial information, internet activity) for the purposes listed above. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics.

You have the right to know, delete and correct your personal information, and not to be discriminated against for exercising these rights. You or an authorized agent can send a request to contact@launch-now.dev. We will verify your identity before responding.

9. Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Access is limited to people who need it, and accounts can be protected with two-factor authentication. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authority as required by law.

10. Cookies

We only use cookies needed to run the service and remember your preferences. See our Cookie Policy for the full list.

11. Children

Pulse is not intended for anyone under 16. We do not knowingly collect their data; if you believe we did, contact us and we will delete it.

12. Changes

We will post any change on this page and update the date above. For material changes, we will also notify you by email or in the app before they take effect.

13. Contact

TODO: registered company name (or your full name if sole trader), TODO: street, postal code, city, TODO: country. Email: contact@launch-now.dev.