Privacy Notice

Effective date: 2026-07-26

Summary

We collect what we need to run a business-health assessment for you and nothing more. Your assessment answers are never sent to analytics. We don't sell your data. Your checks and scores stay as long as your account does — because tracking your score over time is the point — and you can delete everything from Settings whenever you want.

Questions: privacy@pulsilon.com.

Details

1. Who we are

Techsilon LLC, a Florida limited liability company, operates Pulsilon. Registered Agents Inc, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA. We are the controller of the data described here.

Pulsilon is a business service directed at users in the United States. It isn't marketed or targeted to individuals in the EEA, the UK or elsewhere, and it isn't intended for personal, family or household use.

2. What we collect

What	Examples	Where it comes from
Account	Email address, name, which sign-in provider you used	You
Business profile	Business name, industry, size band, region, business type	You
Assessment	Your answers, which question set you used, whether you answered by form or chat, timestamps	You
Derived results	Dimension scores, overall score, band, recommendations	Calculated by us from your answers
AI conversations	Messages you exchange with the assistant	You and the model
Billing	Subscription status, plan, Paddle customer and subscription identifiers, payment events	Paddle
Product analytics	A small set of usage events — see §5	Your browser
Operational	Server logs and error information generated while serving your requests	Automatic

We never see your card details. Payment information goes directly to Paddle; we receive only the resulting subscription status.

Your PDF report is generated in your browser. Building it sends nothing to a server.

If you take a check without an account, your answers stay in your own browser's local storage and are not transmitted to us until you choose to save them by entering an email address.

3. Why we use it

• To run the assessment and produce your score, report and recommendations.
• To keep your history so you can see whether your score is moving.
• To create and secure your account and sign you in.
• To take payment, manage your subscription and meet tax and accounting obligations.
• To send you service email — your report, trial reminders, a notice if a payment fails, and confirmation if you delete your account.
• To answer you when you contact support.
• To keep the service working, diagnose faults and prevent abuse.
• To understand, in aggregate, which parts of the product people use — see §5 for the strict limits on this.

We do not sell your personal information, and we don't share it for cross-context behavioural advertising.

4. Who processes it for us

These providers process data on our behalf, for the purposes above only:

Provider	What it does	What it sees
Vercel	Hosts the application	Requests, server logs
Supabase	Database and authentication	Account, business profile, assessments, scores, chat history
Paddle	Merchant of record — payments and tax	Your payment details (directly from you), billing contact
OpenRouter	Routes AI requests to model providers	The content of your AI conversations, and your score context
Anthropic, OpenAI	Provide the AI models, via OpenRouter	The content sent for that request
Resend	Sends our email	Your email address and the message content
PostHog	Product analytics	The limited events in §5 — never your answers
Inngest	Runs scheduled background jobs (e.g. trial emails)	Identifiers needed to schedule a message
Cloudflare	DNS	Network-level request routing

Your data is stored in the United States.

We may also disclose information if the law requires it, to protect our rights or someone's safety, or to a successor in a merger or acquisition — in which case this notice continues to apply until you're told otherwise.

5. Analytics — and the hard limit on it

We use PostHog to understand how the product is used in aggregate. What it receives is deliberately narrow:

What we send: page views, and a small set of product events such as starting a check, finishing a check, and clicking a call to action. Where an event describes a check, it carries counts and the business type — never content.

What we never send:

• your assessment answers, or the text of any option you selected;
• the scores those answers produce;
• the content of your AI conversations;
• your payment details;
• any secret or credential.

What we've switched off: session replay, autocapture, dead-click capture and error autocapture are all disabled in the application itself, not merely in a dashboard setting — so they stay off regardless of how the analytics account is configured. Console-log capture is off.

Cookies. Pulsilon uses cookies and similar storage to keep you signed in, to remember an in-progress check in your own browser, and for the analytics described above. We don't use advertising cookies or trackers.

Opting out. Email privacy@pulsilon.com to opt out of product analytics; your account and the service work exactly the same without it.

6. AI processing

When you use chat features, your messages — and context from your latest check — are sent through OpenRouter to the model provider serving that request. Don't put anything into the chat you wouldn't want processed by a third-party AI provider.

Model providers operate their own retention and processing practices, which we don't control.

AI never determines your score. The score is produced by our own deterministic engine; the AI explains and discusses it. See the Terms of Service §4.

7. How long we keep it

Data	Retained
Account and business profile	While your account exists
Assessments, scores, reports	While your account exists — your score history is the product working as intended
AI conversations	While your account exists
Billing records	Approximately 7 years, as tax and accounting rules require — kept even if you delete your account
Dormant free accounts	Removed after 24 months with no sign-in and no check, after we email you a warning first
Product analytics	Per the provider's retention configuration
Server logs	A short operational period

We deliberately don't expire your assessments on a fixed schedule. Doing so would delete the score history you're paying to keep.

8. Sharing your checks with an advisor

Some people use Pulsilon through a consultant or advisor. If one invites you to work together, nothing is shared until you accept. An invitation on its own gives them no access to anything.

Before you decide, we show you who is asking and exactly what accepting would mean.

If you accept, that advisor can see:

• all of your completed health checks — including ones you finished before you accepted;
• the scores from those checks, and the answers behind them.

They cannot:

• see your conversations with the AI advisor — those stay private to you;
• change anything, take any action on your behalf, or use your account;
• see anything at all if you never accept, or after you stop sharing.

You can stop at any time, from Settings → Shared with. Access ends immediately and needs no co-operation from the advisor. Nothing of yours is deleted when you do — they simply stop being able to see it. Their access also ends if they close your workspace or their own plan lapses.

Invitations expire after 14 days if you don't respond. An expired or declined invitation shares nothing; the advisor can send a new one, and you can decline again.

Where an advisor uses Pulsilon to assess a business on behalf of a client, the advisor decides what to do with what they see, and their own agreement with their client governs that. We provide the tool.

9. Deleting your data

From Settings, at any time. You'll be asked to type your email address to confirm, because it can't be undone. Deletion removes your account, business profile, checks, answers, scores, reports and chat history. We email you afterwards to confirm.

If you have an active subscription, cancel it first — we won't delete an account while a plan could still be charged.

By email, if you can't sign in: privacy@pulsilon.com. We'll verify you control the account and complete the deletion within 30 days.

What survives deletion: records of payments, for the period in §7. A deletion request can't override a statutory retention obligation, and we'd rather say so than imply otherwise.

10. Your choices and rights

Whatever your location, you can:

• See what we hold — most of it is visible in your dashboard and settings;
• Correct your profile from Settings;
• Export your results as a PDF at any time;
• Delete your account, as above;
• Opt out of product analytics;
• Unsubscribe from lifecycle email via the link in any such message. Essential service messages — a receipt, a failed payment, a deletion confirmation — will still reach you.

Depending on where you live you may have additional statutory rights. Write to privacy@pulsilon.com and we'll deal with your request; we don't require you to have a particular residency to ask.

We don't use your data for automated decision-making that produces legal or similarly significant effects about you. Your Pulsilon score is a self-assessment result, not a determination about you.

11. How we protect it

• Every Pulsilon table sits in its own database schema with row-level security, so a query can only reach rows belonging to the signed-in user.
• Sign-in is passwordless — we never store a Pulsilon password, so we can't leak one.
• Card details never reach our systems.
• Privileged credentials are server-side only and never sent to your browser.
• Traffic is encrypted in transit.

No service can promise perfect security, and we don't.

12. Children

Pulsilon is a business tool and isn't directed at anyone under 18. We don't knowingly collect data from children. If you believe a child has given us information, write to privacy@pulsilon.com and we'll remove it.

13. International users

Pulsilon is operated from the United States and your data is stored there. If you use the service from elsewhere, you're sending your information to the United States. We don't target users outside the US, and this notice doesn't attempt to describe rights under regimes we don't operate under.

14. Changes

We'll update this notice as the product changes. Material changes will be notified before they take effect. The version and date at the top always identify the current text.

15. Contact

Privacy: privacy@pulsilon.com · Everything else: support@pulsilon.com Techsilon LLC, Registered Agents Inc, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA