Privacy Policy

Pulse is a marketing analytics dashboard operated by Uniqbe ("Uniqbe," "we," "us," or "our"). Pulse is provided as an internal tool for Uniqbe's team and a limited set of invited clients — it is not available for public self-service signup. This Privacy Policy explains what information we collect when you use Pulse, how we use it, who we share it with, and the choices available to you.

By being invited to and using Pulse, you agree to the collection and use of information in accordance with this policy.

Account information. When an administrator creates your account, we collect your email address, name, and assigned role (e.g. Admin, Marketing, Viewer) via Supabase Authentication. We do not handle your password directly — authentication is managed by Supabase's managed auth service.

Connected advertising and analytics accounts. When you or your administrator connect a Google or Meta account to Pulse, we collect and securely store the OAuth tokens needed to read data on your behalf, and we retrieve marketing performance data from that account, including:

• Google Search Console — search performance data (queries, clicks, impressions, pages) for verified properties you connect
• Google Ads — campaign, ad group, and keyword performance and spend data for accounts you connect
• Meta Ads (Facebook & Instagram) — campaign, ad set, and ad performance and spend data for ad accounts your organization manages
• Facebook Pages & Instagram (Social tab) — Page and Instagram account insights, posts, and engagement metrics for Pages you manage and connect via Facebook Login

We only request the minimum OAuth scopes required for these features. For Facebook Login specifically, we request: pages_show_list, pages_read_engagement, read_insights, instagram_basic, instagram_manage_insights, and business_management.

AI query data. When you use Pulse's "Ask AI" features, we log the natural-language questions you submit and the AI-generated responses so that conversation history can be shown back to you and to help us improve the product. These queries are processed using Anthropic's Claude API.

Usage and log data. We automatically collect standard technical data such as IP address, browser type, device information, and timestamps of actions taken in Pulse, for security and troubleshooting purposes.

• To operate, maintain, and display your connected marketing data on dashboards
• To power AI-assisted analysis and natural-language querying of your marketing data
• To authenticate you and enforce role-based access controls
• To detect, investigate, and prevent fraud, abuse, or security incidents
• To communicate with you about your account or changes to this policy
• To comply with legal obligations

We do not use your data for advertising, and we do not sell personal information.

Pulse's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data retrieved from Google Search Console and Google Ads is used solely to display marketing performance insights to authorized users within Pulse and is never used to serve advertisements or sold to third parties.

Data obtained through Facebook Login and the Meta Graph API is used solely to provide Pulse's marketing analytics features to authorized users and is handled in accordance with Meta's Platform Terms and Developer Policies. We do not use Meta Platform Data for any purpose other than providing and improving Pulse, and we do not sell it.

We do not sell your personal information. We share information only with:

• Supabase — our database and authentication provider, which stores account records and connected-account tokens
• Vercel — our application hosting provider
• Google and Meta — to retrieve the marketing data you've authorized us to access from your connected accounts
• Anthropic — to process natural-language queries you submit via Pulse's AI features
• Other members of your organization with an appropriate role, so your team can collaborate on shared marketing data
• Law enforcement or regulators, where required by law

Your data is stored in a Supabase-hosted PostgreSQL database with row-level security (RLS) enabled on every table. Connected accounts and their data are scoped strictly to the user who connected them, enforced both at the database level and in application code. Data is encrypted in transit (TLS) and at rest. Access to production infrastructure and admin-configured credentials is restricted to authorized Uniqbe personnel.

We retain account information and connected-account data for as long as your account remains active. AI query history is retained to preserve your conversation history within the product. If your account is deactivated by an administrator, we delete or anonymize your personal data within a reasonable period, except where retention is required for legal, security, or legitimate business purposes.

Depending on your location, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. Because Pulse accounts are created and managed by an administrator, requests to access, correct, or delete your data should be sent to info@uniqbe.com or directed to your Pulse administrator. See our Data Deletion Instructions for the full deletion process. We will respond within a reasonable timeframe.

You can revoke Pulse's access to your Google or Meta account at any time, either by disconnecting the account from within Pulse's Settings page, or directly through the provider:

• Google — myaccount.google.com/permissions
• Meta / Facebook — Facebook Business Integrations settings

Revoking access will stop Pulse from syncing new data from that account, though previously synced dashboard data may remain until deleted.

Pulse uses browser local storage (not third-party tracking cookies) to keep you signed in between visits. We do not use advertising or cross-site tracking cookies.

Pulse is a business tool not directed at, or intended for use by, individuals under the age of 16. We do not knowingly collect personal information from children.

Your information may be processed and stored in countries other than your own, including the United States, by our infrastructure providers (Supabase, Vercel) and API providers (Google, Meta, Anthropic). We rely on those providers' own safeguards for international data transfers.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

If you have questions about this Privacy Policy or how your data is handled, contact us at info@uniqbe.com.