Privacy Policy

Information you provide directly to us

In Short: We collect personal information that you provide when you register, connect integrations, configure bots, contact us, or buy paid features.

Website and device data. When you visit our website or app, we may process IP address, browser and device information, language and country-related settings, page and feature usage data, cookie, local storage, and similar technology data, and security and anti-bot verification data such as Turnstile-related data on signup.

Account and profile data. When you create or use an account, we may process your email address, username, password and authentication data, country, preferred language and notification language, phone number if you provide one, and account settings, preferences, and feature flags.

Social login data. If you choose to sign in or register through a social provider, we may receive data from that provider, such as your account identifier, email address, and other profile data that the provider makes available to us based on your permissions and the provider settings.

OLX connection and imported OLX data. When you connect an OLX account, we may process OLX access and refresh tokens, OLX account or profile data, listing data associated with your connected OLX account, OLX conversation data including message content and message metadata, and thread identifiers, conversation flags, and interlocutor data retrieved from OLX.

Bot configuration and user content. When you configure bots, we may process bot names and settings, answer templates, keyword rules, prompts and prompt chunks, uploaded files or other supporting content you provide, and integration-source settings and capability configuration.

AI processing data. When you use AI-assisted or automated reply features, we may process prompts assembled from your bot settings, imported OLX conversation content, imported listing and account context, system and operational instructions we use to generate a reply, AI-generated outputs, and token-usage and related metering data.

Billing, subscription, and payment data. When you buy a subscription, package, refill, or saved-card feature, we may process transaction identifiers, provider reference numbers and payment status data, subscription plan and renewal settings, saved-card token and masked card number, and client IP associated with billing or checkout operations. We do not store full payment card numbers or CVV values.

Support, notification, and communications data. We may process support emails or messages you send us, account and service messages sent to you, email notification settings, Telegram chat ID and notification settings if you connect Telegram, and delivery logs for notices, alerts, and broadcasts.

Security, abuse, and operational logs. We may process account-deletion token data, webhook signatures and webhook payload records, integration event and call-log data, application log entries, bot event logs and token-usage logs, and abuse and fraud signals, including payment failures and account abuse flags.

Information from third parties. We may also receive personal data from OLX, payment providers, Merchants of Record (such as Paddle), payment-status callbacks, AI providers when they return generated outputs, social login providers, and email, Telegram, or support interactions.

Sensitive information. We do not intentionally request special-category personal data. However, imported OLX conversation content may contain personal data provided by third parties through the marketplace.

For more information about cookies and similar technologies, please see our Cookie Policy: https://pulsgpt.com/rules-and-policies/cookie-policy/.

In Short: We process personal data to provide the service, manage subscriptions and communications, secure the service, operate optional analytics or advertising technologies with consent, and comply with law.

Depending on how you interact with the service, we may process personal data to:

• create and manage accounts, authenticate users, and support password reset or social login flows
• connect OLX accounts, retrieve and display connected OLX data, and operate configured bot workflows
• generate suggested or automated replies, support bot logic and response workflows, meter token usage, and maintain service records
• process payments, activate or renew subscriptions, support saved-card and auto-renew features, and maintain billing, accounting, and audit records
• send account, billing, subscription, support, and operational communications, including optional Telegram notifications if you connect them
• protect the service through anti-bot checks, fraud and abuse detection, webhook verification, logging, and incident investigation
• run website analytics, advertising attribution and remarketing, and optional site tools such as live chat when the relevant consent is given
• understand how the service is used so we can improve features, troubleshoot problems, and maintain service quality
• respond to lawful requests and establish, exercise, or defend legal claims

OLX and conversation data. If you connect an OLX account, we may access and process OLX data that is necessary to operate the service you requested. This can include your linked OLX account data, listings, conversation content, and conversation metadata. We use that data to display conversations and related context in the app, operate your configured bot workflows, generate automated or suggested replies, send or assist with replies through the connected OLX account, and maintain technical logs, token metering, service reliability, and security controls.

AI features. When you use AI-assisted or automated response features, we submit selected prompts and context to OpenAI API to generate outputs. The prompt may include conversation text, listing context, bot instructions, and other relevant configuration data. At the time of this Policy, our OpenAI account data-sharing settings for model improvement are disabled. Based on OpenAI's published API documentation, API inputs and outputs are not used to train OpenAI models by default unless the customer explicitly opts in. We do not currently use OpenAI conversation-state or similar persisted-state features in our integration. However, OpenAI may still retain limited API data for security, abuse monitoring, logging, and service operation purposes under its own policies.

Internal product improvement. We may analyze usage patterns, operational metrics, and feature interactions to understand how the service is used, improve features, troubleshoot problems, and maintain service quality. We do not use message texts from connected OLX conversations for separate internal model training or general product-improvement datasets. In limited cases, message-related data may appear in operational or error logs and may be reviewed when needed to troubleshoot errors, investigate abuse, or maintain service security and reliability.

In Short: Where GDPR, UK GDPR, or similar laws apply, we rely on legal bases such as performance of a contract, legal obligations, legitimate interests, and consent depending on the type of processing.

We rely on the following legal bases where applicable:

• Consent. We rely on consent for optional cookies and similar technologies where required by applicable cookie or ePrivacy rules. You can withdraw consent at any time through our cookie settings or by contacting us.
• Performance of a Contract. We process personal data when it is necessary to provide the services you request, including account management, OLX connection, bot operation, AI-assisted reply generation, subscription management, billing, support, and delivery of operational communications.
• Legitimate Interests. We process personal data where it is reasonably necessary for interests such as service security, fraud and abuse prevention, product support, troubleshooting, operational logging, measuring service reliability, understanding feature usage, and maintaining the stability of the service, provided those interests are not overridden by your rights.
• Legal Obligations. We process personal data where necessary to comply with tax, accounting, audit, legal, regulatory, or law-enforcement obligations, and where we must keep or disclose records under applicable law.

The appropriate legal basis can vary depending on the data category, the service feature involved, and the jurisdiction whose law applies to your situation.

In Short: We may share personal data with service providers, integration partners, communications providers, analytics or advertising partners, and authorities or advisers where required.

Depending on the relevant processing activity, we may share personal data with:

• Contabo, which hosts our core application infrastructure in the EU
• OLX, where required to connect accounts, retrieve data, or send actions or replies
• OpenAI, which we use for AI-assisted generation and analysis of chatbot messages and related context
• authorised payment service providers and Merchants of Record (such as Monobank and Paddle), which we use to process transactions, manage subscriptions, calculate applicable taxes, handle chargebacks and refunds, and perform compliance and anti-fraud checks
• SendPulse, which we use for email delivery
• Telegram, if you choose to connect Telegram for notifications
• Google, which we use for analytics and targeted advertising technologies
• Meta, which we use for targeted advertising technologies
• Tawk, if live chat functionality is enabled by consent
• Cloudflare, including Turnstile for anti-bot and security checks
• social login providers if you choose to use them
• professional advisers, auditors, courts, regulators, or authorities where required or appropriate

We may also disclose personal data where necessary to investigate fraud, abuse, payment disputes, or legal claims. If we are ever involved in a merger, financing, or sale of assets, personal data may also be disclosed as part of that transaction, subject to applicable law.

In Short: Yes. We use cookies, pixels, local storage, tags, and similar technologies. Some are strictly necessary and others are optional depending on your choices.

Our current first-party consent logic distinguishes between strictly necessary technologies, support and functionality technologies such as Tawk live chat, tracking technologies in our banner that correspond to analytics technologies such as Google Analytics 4, and targeting or advertising technologies such as Google Ads and Meta Pixel.

We also use Cloudflare Turnstile on the signup page as a security and anti-abuse technology. Turnstile is used for signup security rather than analytics or advertising. Optional Google, Meta, and Tawk technologies do not load until the relevant consent is given.

Specific information about how we use these technologies, how consent works, and how you can manage them is set out in our Cookie Policy: https://pulsgpt.com/rules-and-policies/cookie-policy/.

Google Analytics and advertising technologies. Where consent is given, we may use Google Analytics for measurement and may use Google or Meta technologies for advertising attribution or retargeting. In our current implementation, Google Tag Manager is used as the advertising loader, while Google Analytics 4 is kept separate from the advertising path.

In Short: If you choose to register or sign in using a social login provider, we may receive certain profile and authentication-related information from that provider.

Our service may offer social login options such as Google, Facebook, or Apple. If you choose one of these methods, we may receive data such as your account identifier, email address, and other profile information that the provider makes available to us based on your permissions and that provider's settings.

We use this information to authenticate you, create or link your account, and support access to the service. We do not control the provider's own separate processing, so you should review the privacy policy of any social login provider you choose to use.

In Short: Yes. Your personal data may be processed outside your country depending on the providers involved in the relevant service.

Our core application and database are hosted on a Contabo server in the European Union. However, we also use third-party providers that may process personal data outside your country and, depending on the provider, outside the European Economic Area. This can include providers such as Google, Meta, OpenAI, Telegram, SendPulse, payment processors and Merchants of Record (such as Paddle), and social login providers if you use those features.

The exact transfer basis may differ by provider and by the service used. Where applicable, we rely on safeguards made available in the relevant provider arrangement or another transfer basis permitted by applicable law. If you need the current transfer basis for a specific provider, you may contact us.

In Short: We retain personal data for different periods depending on the category of data and the purpose for which it is used.

We do not apply one single retention period to all data. Instead, we retain data for different periods depending on the category and purpose. In general, account data is retained while your account is active and for a reasonable period afterwards as needed for support, security, legal, and recordkeeping purposes.

• Billing, tax, and transaction records: retained while the account remains active and thereafter for up to 5 years, or longer where necessary for tax, accounting, audit, dispute, fraud-prevention, or legal-claims purposes
• Saved cards: retained while needed for active subscription renewal or recent payment use and deleted after 12 months of inactivity if they are not linked to an active subscription and are not under a retention hold
• Linked OLX account data, bot settings, and connected service records: retained while needed to provide the service and until deletion, disconnection, expiry, or other cleanup rules apply
• Conversation and thread cache data: certain thread, message, and interlocutor cache entries use limited technical retention, including 30-day cache periods for some data
• General application logs: 30 days
• Security and abuse logs: 90 days
• Backup archives: up to 6 months for disaster recovery and business continuity
• Account deletion confirmation tokens: retained only until expiry and purged automatically

If you need more detail about a specific category, contact us.

In Short: Our services are intended for adults and are not directed to children.

We do not intend to offer the service to minors. If we learn that we have collected personal information in a manner that requires us to remove it, we will take appropriate action. If you believe a child has provided personal information to us inappropriately, please contact us at privacy@pulsgpt.com.

In Short: Depending on your location and applicable law, you may have rights relating to access, correction, deletion, restriction, objection, portability, withdrawal of consent, and complaints to a supervisory authority.

If you are in the EEA, UK, Switzerland, or another jurisdiction with similar rights, you may have the right to request access to your personal data, request correction of inaccurate data, request deletion of certain data, request restriction of certain processing, object to certain processing, request portability of certain data, and withdraw consent where processing relies on consent.

These rights are not absolute. For example, we may need to retain some records for legal, tax, accounting, security, fraud-prevention, or dispute-related reasons. We will consider and act upon valid requests in accordance with applicable data protection laws.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you may also have the right to complain to your local supervisory authority or the UK Information Commissioner's Office.

Withdrawing consent. If we rely on consent for certain processing, such as optional cookies and similar technologies, you can withdraw that consent at any time through our cookie settings or by contacting us.

Marketing communications. You can opt out of marketing emails at any time by using the unsubscribe link in those emails or by contacting us. We may still send service-related messages that are necessary for the administration and use of your account.

California residents. If California privacy law applies to your situation, you may have additional rights regarding access, deletion, correction, and disclosures about categories, sources, purposes, and recipients of personal information. If California law requires a dedicated Notice at Collection or additional sale or share disclosures for our operations, we will provide those notices accordingly.

Cookies and similar technologies. Most browsers allow you to remove or reject cookies. However, doing so may affect certain site or account features. For more information, please see our Cookie Policy: https://pulsgpt.com/rules-and-policies/cookie-policy/.

If you have questions or comments about your privacy rights, you may email us at privacy@pulsgpt.com.

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As a result, we do not currently respond to DNT browser signals or any other similar automatic mechanism.

In Short: Yes. We may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or our data practices.

The latest version will be posted on our website with its effective date. If we make material changes, we may notify you by prominently posting an update or by another method appropriate for the service.

Some personal data is required to provide the service. For example, we need account and authentication data to create and secure an account, OLX authorization data to link an OLX account, certain billing data to process payments and meet tax and accounting obligations, and bot configuration data to run bot features.

If you do not provide required data, some features may not work and we may not be able to provide the service you requested. Optional data includes certain profile fields, Telegram connection details, optional marketing and analytics cookie data, and optional saved-card and auto-renew features.

We offer an account-deletion flow. When an account is deleted, the account is deactivated and operational service data is cleaned up through application logic.

However, we may still retain data that we need for legal, accounting, security, fraud-prevention, dispute, or recordkeeping purposes. Because our service also uses caches, logs, billing records, and backup archives, deletion may not mean immediate erasure from every technical layer at the same time.

If you have questions or comments about this Privacy Policy or our data practices, you may email us at privacy@pulsgpt.com or contact us through the contact information provided on our contact page at https://pulsgpt.com/contacts/.

Depending on applicable law, you may have the right to request access to, correction of, or deletion of certain personal information we process. You may also be able to review or update some account information directly in your account settings.

To request review, update, or deletion of personal information, please contact us at privacy@pulsgpt.com.