What we keep, and why.

What we collect

• Account details: your name, email address, and a password hash. Payments are handled by Stripe; we store a customer reference, not card numbers.
• Intake details about the organization you are assessing: name, website, channels, audience, goals, and anything else you choose to tell us.
• The research itself: public pages, claims, and scores about the organization, and the reports we generate from them.
• Usage: sign-ins, share-link opens, and clicks on report calls to action, so we know which reports are being read.

How we use it

To produce and deliver your reports, to run Pulse updates you subscribe to, to answer disputes and support requests, to benchmark scores in aggregate by category (no organization is identified in a benchmark), and to improve the product. We send transactional email about your account and reports. We do not sell personal information and we do not show advertising.

Who else sees it

Research runs on infrastructure and model providers we contract with (hosting, search, language models, presentation generation, email delivery, and payments). They process data on our behalf under their own security commitments. Share links you create are visible to anyone who has the link until you revoke it.

Retention and deletion

Reports and their evidence are kept so you can return to them and so Pulse can compare versions. Email us to delete your account and its reports; we remove them within thirty days except where a payment record must be kept.

Security

Traffic is encrypted in transit, credentials are hashed, stored API keys are encrypted at rest, and the database is backed up nightly. No system is perfect; if we learn of a breach affecting you we will tell you.

Contact

Questions about privacy go to Redbird Group through redbirdgroup.co.