Privacy Policy
Last updated: 2026-06-10
Introduction
Welcome to UserPulse. We take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service.
Data Controller
Felix Wortmann
c/o MDC#fwmn
Welserstraße 3
87463 Dietmannsried
Germany
Email: support@userpulse.link
Data Protection Officer
For GDPR and related privacy questions, you can contact our Data Protection Officer at:
Felix Wortmann
c/o MDC#fwmn
Welserstraße 3
87463 Dietmannsried
Germany
Email: support@userpulse.link
Data We Collect
We collect the following data when you use UserPulse:
Account Information: Email address, username, optional profile picture, and related account metadata you provide during registration.
User Content: Feedback, comments, private contact messages to board owners, and other content you submit through the platform. Private contact messages may include an optional sender name and email address.
Usage Data: We collect product usage events (e.g., board views, actions you trigger, and anonymous interaction summaries) via Plausible Analytics.
Technical Data: Request metadata may be processed for delivery and security purposes, including IP address and user-agent level data as part of normal web infrastructure operation.
How We Use Your Data
We use your data to:
- Provide and maintain our service
- Authenticate your identity and manage your account
- Display your feedback and comments to board participants
- Deliver private contact messages to the relevant board owner
- Send transactional emails (e.g., account verification)
- Improve our service based on product analytics and incident-response needs
Third-Party Services
We use the following third-party services to operate UserPulse:
Vercel: Hosts our web application. Vercel may process your IP address and request metadata as part of serving the application.
Convex: Provides our backend database and real-time data sync. Your account data and user content are stored on Convex infrastructure.
Resend: Handles transactional email delivery. Your email address is shared with Resend to send account-related emails.
Plausible Analytics (self-hosted): Provides usage analytics based on server- and event-level data. It is configured for privacy-oriented tracking.
Legal Basis
When applicable, our legal basis for processing is:
- Performance and security of the service (contractual necessity and legitimate interests)
- Account communications, including login emails (contractual necessity)
- Analytics and service improvement (legitimate interests)
- Requests you submit through support or contact features (contractual necessity).
Cookies
Our analytics setup is configured without tracking cookies.
User authentication and session handling may involve essential cookies/session storage required for sign-in and account continuity. These are strictly necessary for the service to function and cannot be opted out of.
Our website uses no third-party advertising cookies.
Data Retention
We retain your personal data while your account is active and as long as needed to operate boards, conversations, and support obligations.
If you delete your account through Settings, we remove your account record and associated data immediately within the limits of system operations.
Plausible logs and product analytics data are kept for operational and security purposes according to our infrastructure settings.
Rights for EU/EEA and UK Users
If you use UserPulse from the European Economic Area or the UK, you have rights under the GDPR, including access, correction, deletion, restriction, objection, and data portability. To exercise these rights, please contact support@userpulse.link with details of your account or the data you are requesting.
Rights for California Users
If you are in California and applicable state privacy law applies to you, you may submit a request to access, correct, delete, or ask questions about your personal data by contacting support@userpulse.link.
Rights in Other Countries
If you are based in another country and another data protection regime applies, please contact support@userpulse.link. We will apply the most relevant local legal framework where applicable.
Children
UserPulse is not directed at children under 13. We do not knowingly target minors. If you are under 13, please do not use our service. For users under 16 (or your local age of digital consent), please ensure any required parental/guardian consent is in place before using the service.
Data Subject Request Timelines
For users in the EEA/UK, we process access, correction, deletion, and portability requests within one month of verification, and we may extend this by up to two additional months in complex or numerous requests. We will acknowledge receipt as soon as possible and in any case within 14 days.
Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of Access: You can request a copy of your personal data.
- Right to Rectification: You can request correction of inaccurate data.
- Right to Erasure: You can request deletion of your personal data.
- Right to Data Portability: You can request your data in a machine-readable format.
- Right to Object: You can object to the processing of your personal data.
- Right to Restrict Processing: You can request limitation of processing.
To exercise any of these rights, please contact us at support@userpulse.link.
Contact
If you have any questions about this Privacy Policy, please contact us at support@userpulse.link. For privacy requests, we will acknowledge and start processing within reasonable time.