Privacy Policy

The data controller is Pulse Labs (Rosario, Santa Fe, Argentina). For any question about your data, write to [email protected].

When a client business uses Pulse Core to manage its own customers, that business is the controller of those records and Pulse Labs acts as a processor on its behalf.

Account data: name, email, language and preferences of platform users.

Business operational data: appointments, customers, services, messages and payments entered so the platform can work.

Technical data: access logs, request identifiers and minimal metrics for security and diagnostics.

If you connect your Google account, Pulse Core asks for two specific permissions: to view and edit events on your calendar (calendar.events scope) and to query your busy/free availability (calendar.freebusy scope).

We use those permissions for a single purpose: to reflect, in your Google Calendar, the appointments booked in your Pulse Core scheduler (creating, moving or cancelling the corresponding event) and to read your availability so we do not double-book. We do not read or modify events unrelated to that function.

The connection is optional and you enable it. You can revoke it at any time from the platform connectors screen or from your Google account security settings (myaccount.google.com/permissions). Once revoked, we stop accessing your calendar.

Pulse Labs' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your Google Calendar data for advertising, we do not sell it, and we do not allow humans to read it except as strictly necessary to operate the feature you enabled.

To provide the service you contracted or enabled: scheduling, notifications, payments and calendar sync.

For security, abuse prevention and compliance with legal obligations.

We do not use your data for advertising and we do not sell it to third parties.

Only with providers that help us operate (hosting, transactional email, payment processors and, if you connect it, Google), and solely for those purposes. Each processes data under confidentiality agreements.

We may disclose data if a competent authority requires it by law.

We keep data while your account is active or while it is needed to provide the service and meet legal obligations. When it is no longer needed, we delete or anonymize it.

Google access tokens are stored encrypted and deleted when you disconnect the integration.

You can request access, rectification, deletion or portability of your data, and object to certain processing. Write to [email protected] and we respond within a reasonable time.

We isolate each business's data at the database level, encrypt secrets at rest, and restrict staff access to what is strictly necessary. No system is infallible, but we work to minimize risk.

If we update this policy, we publish the new version at this same URL and change the date above. For questions, write to [email protected].