Privacy Policy

1. Who We Are

Pulse by A.I.M LLC ("we," "us," or "our") operates the Pulse by A.I.M platform available at pulsebyaim.com and pulsebyaim.com. This Privacy Policy explains how we collect, use, share, and protect your information when you use our services.

2. Information We Collect

Account Information: Name, email address, and password when you create an account.

Profile & Settings: Your personal phone number (used only for SMS task reminders you opt into), Twilio credentials (stored AES-256-GCM encrypted), and messaging preferences.

Lead & Contact Data: Names, phone numbers, addresses, and notes you import or enter. This data belongs entirely to you.

Message History: Records of SMS messages sent and received, including timestamps and delivery status, for compliance and audit purposes.

Usage Data: Pages visited, features used, IP address, browser type, and device information collected automatically.

Payment Information: Billing is handled entirely by Stripe. We do not store credit card numbers. We receive transaction confirmation, plan type, and Stripe customer ID only.

Support Communications: If you contact us by email or support, we retain those communications to resolve your request.

3. How We Use Your Information

• To provide, operate, and improve the Pulse platform
• To send transactional emails (account confirmation, plan receipt, password reset)
• To send SMS task reminders to your personal phone (only if you opt in via Settings)
• To process payments and manage subscriptions via Stripe
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations
• To respond to your support requests

We do not sell your personal data. We do not use your lead or contact data to train AI models.

4. Third-Party Services

We share data only with processors necessary to operate the platform:

• Supabase — Database and authentication (supabase.com/privacy)
• Stripe — Payment processing (stripe.com/privacy)
• Twilio — SMS delivery (twilio.com/legal/privacy)
• Brevo — Transactional email (brevo.com/legal/privacypolicy)
• Railway — Application hosting (railway.app/legal/privacy)

5. SMS Messaging & Mobile Data

No sharing of mobile data: Mobile phone numbers and SMS opt-in data are never shared with third parties or affiliates for marketing or promotional purposes. All categories of mobile-originating data — including phone numbers, SMS opt-in records, and SMS message content — are excluded from sharing with third parties. Message data is shared only with the SMS delivery vendor strictly necessary to transmit the message you requested (Twilio).

Message frequency: Message frequency varies based on usage and the conversations initiated. Inbound leads who opt in via contact forms typically receive conversational follow-up messages from the operator. Property owners contacted on a one-to-one basis typically receive a single inquiry per recipient.

Message and data rates: Message and data rates may apply. Standard carrier charges for sending and receiving SMS messages apply based on your wireless plan.

Opt-out and help: You may opt out of SMS messages at any time by replying STOP (or UNSUBSCRIBE, QUIT, END, CANCEL) to any message you receive. Reply HELP to receive sender contact information. Opt-out requests are honored immediately and permanently.

6. Data Security

Twilio credentials are encrypted using AES-256-GCM before storage and are only decrypted inside isolated server-side functions — never exposed to the browser or client. All data is transmitted over HTTPS/TLS. Access to production systems is restricted to authorized personnel only.

No method of transmission over the internet is 100% secure. While we implement industry-standard safeguards, we cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, personal data is deleted or anonymized within 30 days, except where required by law (payment records are retained for 7 years for tax compliance). SMS message logs may be retained for up to 2 years for compliance and dispute resolution.

8. California Residents — CCPA / CPRA

California residents have the following rights under the CCPA and CPRA:

• Right to Know: Request a list of personal information collected about you in the past 12 months.
• Right to Delete: Request deletion of your personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell personal information.
• Right to Limit Use of Sensitive Data: Phone numbers are used only for SMS delivery and optional task reminders. You may remove your phone number from Settings at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a California privacy request, email support@pulsebyaim.com with subject line "California Privacy Request." We respond within 45 days.

9. International Users — GDPR

Pulse is intended primarily for users in the United States. If you access the platform from the European Economic Area (EEA), United Kingdom, Switzerland, or other regions with data protection laws, your data will be transferred to and processed in the United States.

EEA/UK users may have the following rights under GDPR:

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

Our lawful bases for processing: contract performance, legitimate interests (security/fraud prevention), legal obligation, and consent (for optional features like SMS reminders).

To submit a GDPR request, email support@pulsebyaim.com. We respond within 30 days.

10. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand platform usage. We do not use third-party advertising trackers or sell data to ad networks. You may disable cookies in your browser settings, but some features may not function correctly.

11. Children's Privacy

Pulse is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or prominent platform notice at least 14 days before changes take effect. Continued use after changes constitutes acceptance.

13. Contact

Privacy questions, requests, or complaints:
support@pulsebyaim.com
Pulse by A.I.M LLC · pulsebyaim.com