Privacy Policy
This policy explains what Pulse collects, why, and your choices. In a company workspace, the company (the “Customer”) decides why its workspace data is processed; Neuraft Studio processes it on the Customer's behalf. For a personal workspace, or a request for access, Neuraft Studio is responsible.
What we collect
- Account details: name, username, email, role, workspace, and a password hash — never the password itself.
- Access requests: name, email, and optionally phone, company, job title and a message; plus the IP address the request came from, to prevent abuse.
- What you put in: projects, tasks, checklists, notes, chat messages, and uploaded dashboards and logos.
- Security records: sign-in attempts, the IP address and browser of each session, and an activity log of changes (who did what, when).
- Your settings: notification choices, the date you accepted these policies, and whether you confirmed your email address.
We don't use advertising or analytics trackers. Pulse sets only the cookies it needs to work: a session cookie (signs you in), a short-lived cookie that protects the access request form, and a one-time message cookie. Your theme choice is kept in your own browser.
Why we use it
- To provide the Service you or the Customer asked for (performance of a contract).
- To keep it secure — lockouts, rate limits, the activity log (legitimate interest).
- To send email notifications, only with your consent, which you can withdraw at any time.
- To meet legal obligations.
Who can see it
- People in your workspace see what's shared there. Administrators also see member details and the activity log.
- Private channels and direct messages are shown only to their members; administrators can't open them in the app.
- Focus sessions (the Pomodoro timer) are recorded only for you — how long, and which of your tasks — and nobody else can see them.
- Personal tasks are shown only to the person who made them — not to colleagues or administrators, and they're left out of the activity log and exports.
- Server operators — Neuraft Studio, or the Customer if it hosts Pulse itself — have technical access for operating and securing the Service.
- Service providers we rely on: the hosting company that runs the server and, if you turn notifications on, the email-delivery provider. They may process data only to provide their service to us.
- Authorities, when the law requires and only as much as required.
We never sell personal data.
Where it's kept
On servers operated by our hosting provider in Iran, with encrypted backups kept by Neuraft Studio. If the Customer hosts Pulse itself, on the Customer's servers.
How long
- Workspace content: for as long as the workspace exists, then up to 30 days.
- Published dashboard versions: the most recent 180 per report by default.
- Sessions: until you sign out, 60 minutes of inactivity, or 12 hours at most.
- Sign-in attempts and the activity log: as long as the workspace, for security and accountability, unless the Customer sets a shorter period.
- Declined access requests: up to 90 days.
- Backups: overwritten on their normal cycle (30 days by default).
Your rights
You can ask to access, correct, export or delete your personal data, and withdraw consent to emails at any time (every email has an unsubscribe link, and your account page has the switches). In a company workspace, start with your administrator — the Customer controls that data — or write to us and we'll pass your request on.
Security
Connections are encrypted (HTTPS). Passwords are stored with a slow, salted hash; session tokens and publishing keys are stored only as fingerprints. Workspaces are kept apart in every database query. Uploaded dashboards run in an isolated sandbox with no network access. No system is perfectly secure; if a breach affects your data, we'll tell you and the Customer without undue delay.
Children
Pulse is not for anyone under 18.
Changes and contact
We'll show updated versions in the app before they take effect. Questions or requests: Neuraft Studio [registered legal name and number], [postal address], legal@neuraft.ir.
