Privacy Policy

1. What Pulse reads about plugins and themes

Pulse reads public information: reviews, support threads and directory listings on wordpress.org, and public security advisories. Those posts already carry the public username and date their author chose to publish.

We store those posts so a report can count them and quote them, and every quote links back to the original post. If you wrote a post and want it removed from Pulse, email us and we will remove it.

2. What we collect from you

• When you look up a plugin or theme: the name you typed, and your IP address, used for a short time to limit how many lookups one visitor can make.
• When you use your free report: a one-way hash of your email address, so each person gets one free report. It cannot be turned back into your address.
• When you create an account: your name, email address and how you sign in, your workspace's name, the teammates you invite, the plugins, themes and competitors you track, and a profile image if you upload one.
• While you use Pulse: which reports you have opened, which sources you open inside a report, which upgrade links you click on a report, whether you marked a security alert useful, your notifications, and a log of changes made to your workspace, so a team can see who did what.
• These usage records are kept by us, in our own database, and are tied to your account. We use them to show your team which reports are unread, to tell you each month what you got out of Pulse, to learn which reports lead people to start monitoring, and to judge whether our alerts are worth sending. You can download them with your data, and deleting your account deletes the ones that name you.
• Your plan and payment status, including any payment your bank or our payment provider reverses. Card details go to our payment provider and never reach us.

3. How we use it

• To write your reports and send the emails you asked for, such as a report being ready, the Monday report and security advisories.
• To run your account and your team's workspace.
• To keep Pulse secure and stop abuse.
• To understand what is broken or slow and fix it.
• To tell you, in your monthly review, what Pulse surfaced and what your team did with it.

We do not sell your information, we do not show ads, and Pulse uses no third-party analytics or advertising tracker. The usage records above are first-party: they are written by Pulse, stored in our own database, and never sent to an advertising or analytics company.

4. Who helps us run Pulse

These companies process information for us, only to provide their service:

• WorkOS, for sign-in.
• Resend, for sending email.
• Vercel, for hosting the website.
• Contabo, for the servers and database behind Pulse.
• An S3-compatible storage provider, for images you upload.
• Anthropic and OpenAI, whose AI models read public wordpress.org posts to help write reports. We send them the text of public posts, not your account details.
• Dodo Payments, for payments and the customer portal.

Some of these companies store information outside your country, including in the United States and the European Union.

5. Cookies

Pulse uses four cookies, all needed for the site to work, and none for tracking:

• wos-session keeps you signed in.
• pulse_start remembers the plugin or theme you chose on its preview, so setup opens with it after you sign in.
• pulse_pending_org holds your sign-in for a few minutes while you choose a workspace, if you belong to more than one.
• pulse_last_org remembers which workspace you used last, so signing in opens it.

6. How long we keep it

We keep your account information for as long as your account exists. When you delete your account, we delete your profile and personal information. Records of changes made to a workspace stay, without your name or email, so the rest of your team keeps an accurate history.

The hash of your email that records your free report is kept after you delete your account, so the free report cannot be claimed again. It holds no readable address.

7. Your choices

Wherever you live, you can ask to see, correct, export or delete the information we hold about you. Inside Pulse you can export your data and delete your account from your account settings. For anything else, email us and we will reply within 30 days.

8. Children

Pulse is for people who make and run software, and is not meant for anyone under 18.

9. Changes to this policy

When this policy changes, the date at the top changes too. If a change affects how we use your information, we will email account holders before it takes effect.