legal · the paperwork

The paperwork, in plain language.

Every contract, policy, and disclosure that governs how Pulse handles your team’s data. Written in language a human can read; the formal contract text lives under each link.

Agreements· 2

Terms of serviceThe contract between you and Pulse. Acceptable use, billing terms, IP ownership, termination.
Data processing agreementGDPR Article 28 contract for customers in the EU/UK or those processing EU data. Sub-processor list, retention, deletion, security commitments.

Policies & disclosures· 4

Privacy policyWhat we collect, how we use it, who we share with (we don't sell data), how long we keep it, your rights under GDPR/CCPA.
Sub-processor listEvery third-party service Pulse uses to process customer data: Supabase (Postgres), Vercel (hosting), Anthropic + OpenAI (LLM), Resend (email). Versioned in git so changes leave a paper trail.
Security postureThe security controls in audit order: audit log, encryption at rest + in transit, ACL mirroring, capability scopes, per-agent read-scope enforcement, BYOK, SSO/SCIM, disaster recovery target.
No-surveillance pledgePulse is not built to surveil employees. Concrete commitments: no productivity scores or rankings for individuals, no screen or keystroke monitoring, no per-person sentiment (team-level only, with a five-sender floor). Work context on a person's page is visible to every member equally, including the person. Managers see a metrics-free work-state briefing, scoped to what they can already access.