Pulseprivacy@hqpulse.ai

Privacy Policy

Effective 9 September 2026 · Last updated 9 September 2026

Pulse is operated by Disrupt Ventures LLC ("Pulse", "we", "us"), a New Jersey limited liability company. This policy explains what information Pulse collects when a business uses Pulse to communicate with its own customers over WhatsApp, how we use it, how long we keep it, and how to have it deleted.

This policy covers the Pulse website, the Pulse application, and the Pulse WhatsApp integration. It does not cover the separate privacy practices of the businesses that use Pulse, or of Meta Platforms, Inc. and Twilio Inc., whose own policies apply to the services they provide.

1. Who the parties are

Pulse operates as a technology provider. When a business (our "Client") connects its WhatsApp Business Account to Pulse:

  • The Client is the controller of its customers' personal information. The Client decides who is messaged, what is said, and why.
  • Pulse is a processor acting on that Client's documented instructions.
  • Meta operates the WhatsApp Business Platform, and Twilio is the Business Solution Provider through which messages are transmitted. Both process the same message data under their own agreements.

If you are a customer of a business that uses Pulse and you want your information removed, the fastest route is to contact that business directly. You may also contact us using the details in section 9 and we will route the request.

2. Information we collect

From Clients (the businesses that use Pulse)

  • Account information: name, business name, work email address, and telephone number.
  • Authentication data: the access tokens issued by Meta when a Client authorizes Pulse against its WhatsApp Business Account. We never receive or store a Client's Facebook or WhatsApp password.
  • Billing and usage records: message volume, conversation counts, and invoices.
  • Configuration: message templates, business profile fields, and routing rules the Client sets up.

From a Client's customers (end users), on the Client's behalf

  • The WhatsApp phone number the customer messages from, and their WhatsApp profile name.
  • The content of messages exchanged between the customer and the Client, including text, images, documents, audio, and location if the customer sends it.
  • Delivery metadata: timestamps, delivery and read status, and error codes.

Automatically, from the Pulse website and application

  • Log data: IP address, browser type, pages requested, and referring page.
  • Cookies and similar technologies used to keep a Client signed in and to measure aggregate usage. We do not use advertising cookies and we do not sell personal information.

We do not knowingly collect information from children under 13, and Pulse is not directed at children.

3. How we use it

We use the information above only to:

  • Deliver, route, and display messages between a Client and its customers.
  • Authenticate Clients and secure their accounts.
  • Provide support, investigate faults, and prevent abuse, fraud, and spam.
  • Meter usage and bill Clients.
  • Meet legal, tax, and regulatory obligations.

We do not use the content of a Client's customer messages to train general-purpose machine learning models, and we do not sell or rent personal information to anyone.

4. When we share it

We share information only in these cases:

  • Meta Platforms, Inc., because delivering a WhatsApp message requires it.
  • Twilio Inc., our Business Solution Provider, which transmits messages on our behalf.
  • Service providers for hosting, error monitoring, and payment processing, each bound by contract to use the data only to provide their service to us.
  • Legal process, where we are required by law, subpoena, or court order, or where it is necessary to protect the rights and safety of a person.
  • A successor entity, if Disrupt Ventures LLC is involved in a merger, acquisition, or sale of assets. Any successor is bound by this policy until it is superseded.

5. How long we keep it

  • Message content and delivery metadata: retained for as long as the Client's account remains active, and in no case less than 24 months from the date of the message. Deleted within 30 days of a Client's deletion request or of account closure, unless a legal hold applies.
  • Client account and billing records: retained for the life of the account and then for seven years, to meet tax and accounting requirements.
  • Access tokens: revoked and deleted immediately when a Client disconnects Pulse from its WhatsApp Business Account.
  • Server logs: retained for 90 days.

6. Security

Data is encrypted in transit using TLS and encrypted at rest. Access to production systems is restricted to named personnel, protected by multi-factor authentication, and logged. We review access on a recurring basis and remove it when it is no longer needed. No system is perfectly secure, and we do not claim otherwise; if a breach affects your information we will notify you and any regulator required by applicable law.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal information, to object to certain processing, and to withdraw consent. Residents of California may request disclosure of the categories of personal information collected and may opt out of any sale or sharing; Pulse does not sell or share personal information as those terms are defined by the CCPA. Residents of the European Economic Area and the United Kingdom may lodge a complaint with their supervisory authority.

To exercise any of these rights, contact us at the address in section 9. We respond within 30 days, and we do not charge for a first request.

8. Data deletion

A Client may delete its Pulse account at any time from the application, which revokes all Meta access tokens and queues the Client's stored message content for deletion within 30 days.

An end user may request deletion of their information by emailing the address in section 9 with the WhatsApp phone number concerned. We will confirm the request with the Client whose customer you are, since that business is the controller of the record, and complete the deletion within 30 days of confirmation.

9. Contact

Disrupt Ventures LLC
Attn: Privacy, Pulse
privacy@hqpulse.ai

For anything relating to a specific business's use of Pulse, contact that business first.

10. Changes to this policy

We will post any change on this page and update the "Last updated" date above. If a change materially reduces your rights, we will give Clients at least 30 days' notice by email before it takes effect.