← Back to PulseChat

Privacy Policy

Last updated: March 19, 2026

PulseChat ("we," "us," or "our") is committed to protecting the privacy of our customers and their website visitors. This policy explains what data we collect, how we use it, and your rights.

1. Who This Policy Applies To

This policy applies to two types of users:

Customers: Businesses that sign up for PulseChat and embed our chatbot on their websites.

Visitors: Individuals who interact with the PulseChat chatbot on a customer's website.

2. Data We Collect

From Customers (Account Data)

DataPurpose
Email addressAccount creation and communication
Business nameChatbot personalization
Website URLAI training (knowledge base building)
Payment informationProcessed by Stripe — we do not store card numbers

From Visitors (Conversation Data)

DataPurpose
Chat messagesGenerating AI responses; analytics for the customer
Name, email, company (if voluntarily provided)Lead capture for the customer
Page URL visitedContext for AI responses and analytics
Anonymous visitor ID (browser-generated)Session continuity (not linked to personal identity)
TimestampAnalytics and conversation ordering

We do NOT collect: IP addresses, device fingerprints, cookies for tracking purposes, financial information from visitors, or any data not listed above.

3. How We Use Data

To provide the Service: Generating AI chatbot responses, capturing leads, and providing analytics to customers.

To improve the Service: Analyzing usage patterns to improve chatbot quality and features.

Conversation Intelligence: We aggregate and anonymize conversation data across all customers to generate industry-level insights (e.g., "the most common question SaaS buyers ask"). This aggregated data never identifies individual visitors or businesses. Customers may opt out of contributing to aggregated intelligence.

4. AI Processing Disclosure

PulseChat uses artificial intelligence (large language models provided by Anthropic) to generate chatbot responses. Visitor messages are sent to the AI model to generate relevant responses. We do not use visitor conversations to train AI models. The AI model processes messages in real time and does not retain conversation data after generating a response.

5. Data Sharing

We do not sell personal data. We share data only with:

AI Providers (Anthropic): Chat messages are sent to generate AI responses. Anthropic does not retain this data for training.

Infrastructure (Vercel, Supabase): For hosting and database services. Both are SOC 2 compliant.

Payment Processor (Stripe): For billing. Stripe is PCI DSS compliant. We never see or store card numbers.

Email (Resend): For sending lead notification emails to customers.

Customers: Visitors' conversation data and contact information (if provided) is shared with the customer whose website the visitor is on. This is the core function of the Service.

6. Data Storage and Security

Data is stored in Supabase (PostgreSQL) with encryption at rest (AES-256) and in transit (TLS 1.2+). Our database is hosted in the US East region. We implement access controls to limit data access to authorized systems only. We do not store credentials for customers' external systems (CRM, etc.).

7. Data Retention

Conversation data is retained for as long as the customer's account is active. Upon account deletion, all associated data (conversations, leads, analytics) is permanently deleted within 30 days. Aggregated, anonymized data used for Conversation Intelligence may be retained indefinitely as it cannot be linked to individuals.

8. Your Rights

For Customers:

You may access, export, or delete your account data at any time through your dashboard or by contacting us. You may opt out of Conversation Intelligence data aggregation.

For Visitors:

You may request access to, correction of, or deletion of your personal data by contacting us at hello@getpulsechat.chat. Under GDPR, you have the right to data portability, the right to restrict processing, and the right to object to processing. Under CCPA, you have the right to know what data is collected, the right to delete, and the right to opt out of sale (we do not sell data).

9. International Data Transfers

Data may be processed in the United States. By using the Service (or interacting with a chatbot powered by PulseChat), you consent to the transfer of data to the US. We rely on Standard Contractual Clauses for EU-US data transfers where applicable.

10. Children's Privacy

PulseChat is not intended for use by children under 16. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to customers. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

For privacy-related questions, data requests, or concerns:

Email: hello@getpulsechat.chat