1. Who we are
The controller of the personal data collected on this site is Pulsaiq, which runs pulsaiq.com.
- Controller
- Pulsaiq
- Website
- https://pulsaiq.com
- Contact
- privacy@pulsaiq.com
We have not appointed a data protection officer (DPO), because our activities don’t require one (Article 37 GDPR). Please send any privacy question to the contact above.
2. What data we process, why, and for how long
We only process data for the purposes below. We don’t use your data for profiling or automated decisions.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Giving you access to a template or kit you asked for | Email, role (optional), resource requested, date | Performing your request (Article 6(1)(b) GDPR) | 30 days, unless you subscribe to the newsletter |
| Newsletter | Email, role (optional), date and proof of consent | Consent (Article 6(1)(a)) | Until you unsubscribe. We keep the proof of consent for 3 years afterwards, so we can show we had it |
| Early-access list and survey | Survey answers; your email, if you join the list | Consent (Article 6(1)(a)). Without an email, answers are anonymous | Until you leave the list, or 12 months after the tool launches |
| Replying to contact messages | Name, email, role, message | Legitimate interest in replying to your request (Article 6(1)(f)) | 12 months after our last reply |
| Visit statistics | Page visited, referring page, device and browser type, country. No cookies and no stored IP address | Legitimate interest in knowing which content is useful (Article 6(1)(f)) | 24 months |
| Site security | IP address, in memory only, to limit abusive form submissions | Legitimate interest in protecting the site against abuse (Article 6(1)(f)) | 10 minutes. It is never written to disk |
You can object to any processing based on legitimate interest. Just write to us and tell us why.
3. Who receives the data
We use two service providers, under contracts that meet Article 28 GDPR. We don’t sell data and don’t share it with advertisers.
| Provider | Service | Where the data is |
|---|---|---|
| DigitalOcean, LLC | Hosting of the site, the forms and the statistics | Server in Frankfurt, Germany |
| Cloudflare, Inc. | Delivering the pages and protecting against attacks. It sees visitors’ IP addresses but does not store form data | Network inside and outside the EU |
Statistics use Umami, installed on our own server. Visit data is not sent to third parties.
We don’t use an email-sending service yet. When we start using one, we’ll add it here before sending the first newsletter.
4. Transfers outside the EU
Form data stays on the Frankfurt server. DigitalOcean and Cloudflare are US companies and may access the systems for technical support or to deliver the pages. These transfers are covered by both companies’ certification under the EU-U.S. Data Privacy Framework (Article 45 GDPR) and, as a fallback, by the standard contractual clauses approved by the European Commission (Article 46).
5. Your rights
You can ask us, at any time and free of charge, for:
- Access to a copy of your data (Article 15)
- Rectification of inaccurate data (Article 16)
- Erasure of your data (Article 17)
- Restriction of processing (Article 18)
- Portability, in a commonly used format (Article 20)
- Objection to processing based on legitimate interest (Article 21)
You can also withdraw your consent at any time, without affecting what was done before. For the newsletter, use the link at the end of every email or write to us.
Write to privacy@pulsaiq.com. We reply within one month, as Article 12 requires. If we need to confirm your identity, we only ask for the minimum needed.
If you think we haven’t handled your data properly, you can complain to Portugal’s data protection authority (CNPD), at www.cnpd.pt, or to the data protection authority of the country where you live or work.
6. Security
The site uses HTTPS on every page and security headers. Fonts are hosted on our own server, and no page loads third-party content without your consent. Access to the data is limited to those who need it for the purposes above.
7. Cookies
We don’t use analytics or advertising cookies. The details are in the cookie policy.
8. Changes to this policy
When we change this policy, we update the date and version at the top. If the change is significant, we tell newsletter subscribers by email before it takes effect.