Privacy Policy

This Privacy Policy explains what information PulseRank ("we", "us", "our") collects, how we use it, and the choices you have. It applies to pulserank.xyz and the PulseRank app.

1. Information we collect

• Account information: your email address and, if you provide it, your name.
• Brand data: the brand names, websites, keywords, and competitor names you enter to run scans — whether via the free scan on the homepage or inside your dashboard.
• Scan results: the AI-generated responses, visibility scores, sentiment labels, and rankings produced when we query AI platforms on your behalf.
• Billing information: if you subscribe to a paid plan, PayPal processes your payment details directly — we never see or store your full card or bank details. We do store your PayPal subscription ID and plan tier so we can manage your subscription.
• Usage data: how many scans you've run, which features you use, and basic device/browser information (via standard server logs) needed to keep the Service secure and reliable.

We do not sell your personal data to anyone.

2. How we use your information

We use your information to:

• run scans against AI platforms and generate your visibility reports;
• maintain your account, subscription tier, and usage limits;
• send transactional emails (scan results, billing receipts, password resets, account notices);
• respond to support requests; and
• improve the accuracy and reliability of the Service.

We do not use your brand or scan data to train third-party AI models, and we do not use your data for advertising.

3. Third parties we share data with

To operate PulseRank we rely on a small number of service providers, each of which only receives what it needs to do its job:

• AI platforms (e.g. Google Gemini, Groq/Llama, and — on paid plans — OpenAI, Anthropic, and Perplexity infrastructure): receive the prompts needed to check for your brand's visibility. We do not send them your email address or billing details.
• Supabase: hosts our database and authentication, with row-level security so your data is isolated from other users' data at the database level.
• PayPal: processes subscription payments. Review PayPal's own privacy policy for how they handle your payment data.
• Resend: delivers transactional emails (confirmations, results, receipts) on our behalf.
• Hosting/infrastructure providers (e.g. Netlify): serve the application and may log basic request metadata (IP address, timestamps) for security and reliability.

We don't share your data with any other third party, and we don't sell it.

4. Data retention

We keep account and brand data for as long as your account is active. Free-scan submissions (email + brand name + result) are kept so we can enforce the one-scan-per-email limit and are not used for any other purpose. If you delete your account, we remove your personal data within 30 days, except where we're required to retain limited records (e.g. billing history) for legal or tax purposes.

5. Data storage and security

Data is stored with Supabase using row-level security policies, meaning your data is only accessible to your account (and, for support purposes, authorised PulseRank staff). We use encrypted connections (HTTPS/TLS) for all data in transit. No system is 100% secure, but we take reasonable technical and organisational measures to protect your information.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can export or delete most of your data yourself from Settings → Account. For anything else, contact us and we'll respond within a reasonable timeframe, and in any case within the period required by applicable law (e.g. 30 days under GDPR).

7. Cookies

We use only the essential session cookies required to keep you logged in and to protect the Service against fraud and abuse. We do not use third-party advertising cookies or tracking pixels.

8. Children's privacy

PulseRank is not directed at children under 16, and we don't knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we'll delete it.

9. International data transfers

Our service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or with a notice inside the app before they take effect.

11. Contact

Questions about this policy or your data? Contact us and we'll help.