Privacy Notice

Last updated: 7/29/2026

Who we are

PulseLog is operated by Kelvin Gevariya, acting as the data controller.

Data we collect

• Account data: email, display name, and login credentials.
• Content you create: entries, projects, tags, and attached images.
• Usage data: device, browser, and basic telemetry for security and product improvement.

Purposes and legal basis

We process your data to provide and improve the service (contract performance), prevent fraud and abuse (legitimate interests), and meet legal obligations.

Sharing

• Hosting and infrastructure providers acting as processors.
• Paddle, our Merchant of Record, for billing, subscription management, payments, tax compliance, and invoicing.
• AI providers (Google, OpenAI) for generating summaries and reports from your content when you trigger those features.
• Authorities where required by law.

Retention

We keep data while your account is active. Deleted entries are kept for 30 days before permanent removal. On account deletion, we erase or anonymise your data.

Your rights

You can access, correct, delete, export, or restrict processing of your personal data. Contact us to exercise these rights, or to lodge a complaint with your local supervisory authority.

Security

We use encryption in transit, access controls, and row-level security on the database.