This Privacy Policy explains how Pulse Analytics ("we", "us", "our") collects, uses, stores and protects information when you use our website, dashboard and tracking script (the "Service"). We designed Pulse Analytics to be privacy-friendly by default.

1. Information We Collect

Account Information

When you create an account we collect your name, email address, hashed password (if using email/password sign-in), authentication provider identifiers, subscription plan and billing metadata provided by our payment processor.

Website Analytics Data

When you install our tracking script on your website, we collect aggregate visit information such as URL visited, referrer, page title, viewport size, device type, browser, operating system, approximate location derived from IP (country / region / city), and anonymized visitor identifiers. IP addresses are used only to derive location and are not stored in plain text.

Session Recordings

If you enable Session Replays, we capture DOM changes, mouse movements, clicks, scrolls and page navigation on your visitors' sessions. Sensitive inputs (passwords, credit cards, fields marked as sensitive) are masked before being sent to our servers.

Heatmaps

Heatmaps are generated from aggregated click and scroll coordinates on pages you choose to track. No personally identifying content is captured.

Cookies

Our dashboard uses strictly necessary cookies for authentication and preferences. Our tracking script uses a first-party, short-lived identifier stored in localStorage / cookies on your visitors' devices to distinguish sessions. We do not use third-party advertising cookies.

2. How We Use Data

To provide and secure the Service.
To generate analytics, replays, heatmaps and insights for you.
To process subscriptions and payments.
To send transactional emails (billing, security, product updates).
To detect and prevent abuse.

3. Data Storage

Data is stored on managed cloud infrastructure with encryption at rest and in transit. Session recordings are automatically deleted after 30 days on the Free Plan.

4. Security

We apply industry-standard technical and organizational measures including TLS in transit, encryption at rest, principle of least privilege, row-level security and regular audits. No system is 100% secure — please use a strong, unique password.

5. Your Rights (GDPR, CCPA and similar)

You have the right to:

Access the personal data we hold about you.
Request correction or deletion.
Object to or restrict processing.
Data portability.
Withdraw consent at any time.
Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@pluselytices.com.

6. Data Sharing

We do not sell personal data. We share data only with subprocessors strictly required to operate the Service (hosting, database, email delivery, payment processing) under appropriate contractual safeguards.

7. Retention

We retain account data while your account is active. Analytics data retention depends on your plan. You may request deletion at any time.

8. Changes

We may update this Policy from time to time. Material changes will be announced in the dashboard or by email.

9. Contact

Questions or requests? Email support@pluselytices.com.