Privacy Policy

1. Introduction

Pulsevis is provided by PULSEVIS TECHNOLOGIES (SMC-PRIVATE) LIMITED ("we," "our," or "us"), which is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our desktop point-of-sale application and related services.

2. Information We Collect

Data stored locally on your device:

• Store information (name, address, contact details)
• Product catalog and inventory data
• Sales transactions and receipts
• Customer records you choose to create
• Staff accounts and roles

Data sent when you set up the app or activate a license:

• Store details: store name, country, currency, time zone and language, plus owner name, phone and address if you enter them
• A device fingerprint — a one-way hash of hardware and Windows identifiers — used to enforce device limits
• Operating-system information (platform, computer name and OS version)
• Your license key, when you activate Premium

Data synchronised on Premium:

On a Premium plan, sync runs automatically whenever the app is online. It sends the business data needed to keep your devices in step to our servers: store information, products, categories, vendors, stock entries and removals, customers, staff user records, sales, sale items, payments, returns, the activity log, and register sessions and shifts.

• Device identifiers for multi-device sync
• Account email address (required for Premium subscription)

Inside the desktop app:

• The desktop app does not include usage analytics or crash reporting
• Update checks download release information from our release server on GitHub

Data collected on our website (pulsevis.com):

• Anonymous website analytics (pages viewed, buttons clicked, referring site, device type) via Google Analytics 4 — only after you accept via the consent banner on your first visit. Your IP address is anonymised before it reaches Google.
• The details you enter in the download or contact form, such as your name, business name and type, email address, country and, optionally, phone number
• We do not run advertising, retargeting, or cross-site tracking. No profile is built about you personally.
• If you decline the banner, no analytics data is stored for your session and the tracker never loads.

3. How We Use Your Information

• To provide and maintain the Pulsevis application
• To register your store and verify licenses and device limits
• To sync your data across devices on Premium
• To process Premium subscription payments via Paddle
• To send critical product updates and security notices

4. Data Storage & Security

Your store data is stored locally on your device in a SQLite database, which is not encrypted at rest. On Premium, synced data is sent over encrypted HTTPS connections to our servers hosted on Supabase infrastructure. Customer, vendor, store and staff contact details are additionally encrypted (AES-256-GCM) before they are stored there. Other synced business data, such as products, stock, sales and payments, is stored so that it can be synchronised and is accessible to us in order to provide the sync service.

We implement industry-standard security measures including parameterized queries and role-based access control. We never store raw payment card data — all subscription payments are processed securely through Paddle.

5. Third-Party Services

We use the following third-party services:

• Supabase — Cloud database and authentication for sync features
• Paddle — Subscription billing and payment processing
• GitHub — Application distribution and auto-updates
• Google Analytics 4 — Anonymous website usage analytics on pulsevis.com. Loaded only after you accept the consent banner, with IP anonymisation and Consent Mode v2. No advertising features, no cross-site tracking, no ad personalisation.
• Google Tag Manager — Container-management service used to load the analytics tags above. It runs on the same Consent Mode v2 gate — no tags fire and no data is stored until you accept the consent banner.
• Resend — Transactional email delivery (contact form replies, download links, license keys)

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

6. Your Rights

You have the right to:

• Access all your data (it's stored locally on your device)
• Export your data at any time via the built-in export
• Delete your cloud data by contacting us
• Withdraw website-analytics consent at any time by clearing your browser's site data for pulsevis.com — the consent banner will re-appear on your next visit
• Request complete account deletion by emailing us

7. Data Retention

Local data remains on your device until you uninstall the application or manually delete it. Cloud-synced data is retained as long as your account is active. Upon account deletion, all cloud data is permanently removed within 30 days.

8. Children's Privacy

Pulsevis is a business application not intended for use by children under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the application or by email. Continued use of Pulsevis after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@pulsevis.com.