Privacy Policy

On Pulse Enterprises Pty Ltd (ABN 87 686 271 938) operates Pulsity at pulsity.io. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What This Policy Covers

Pulsity is a B2B platform. We process employee data on behalf of enterprise customers (employers). This policy covers:

• Customer contacts — people who sign up, manage accounts, or contact us
• Platform users — employees whose data is uploaded by their employer (our customer)

2. Information We Collect

Customer Account Information

• Contact name and email
• Company name, ABN, address
• Billing details

Platform Data (on behalf of customers)

Your employer uploads:

• Employee names and work emails
• Timesheet and allocation data
• Project information (names, timelines, budgets)
• Engagement economics (fees, margins)

We do not collect: Home addresses, bank details, health information, or other sensitive personal data.

3. How We Collect Information

• From customers when they sign up or contact us
• From customer uploads when employers import employee data
• Website analytics (IP addresses, pages visited)

We do not collect personal information directly from employees — that comes from their employer.

4. Why We Collect It

• To provide and maintain the Pulsity platform
• To process payments and manage subscriptions
• To provide customer support
• To comply with legal obligations

For platform data, the purpose is determined by your employer — typically resource planning, capacity management, and project economics.

5. Who We Share It With

• Microsoft Azure — Cloud hosting (Australia East)
• Stripe — Payment processing
• Customer administrators — Access within their organisation

We do not sell personal information. Data stays in Australia.

6. Data Security

We protect information through:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls
• SSO and MFA options
• Daily encrypted backups
• Azure-managed infrastructure security

7. Data Retention

• Customer accounts: Duration of subscription plus 7 years (tax/legal)
• Platform data: Duration of subscription; deleted within 90 days of termination on request
• Analytics: 26 months

8. Your Rights

Access and Correction

You can request access to or correction of personal information we hold about you.

For platform data (employee information): Contact your employer — they control that data.

For customer account data: Contact us at privacy@pulsity.io.

Complaints

1. Contact us first: privacy@pulsity.io
2. We'll respond within 30 days
3. If unsatisfied, contact the OAIC at www.oaic.gov.au

9. Data Breaches

We comply with the Notifiable Data Breaches scheme. If a breach is likely to cause serious harm, we will:

• Notify affected customers within 72 hours
• Notify affected individuals and the OAIC as required
• Provide recommendations for protective steps

10. Important Clarifications

Employee records exemption: Although we process employee data, the Privacy Act's employee records exemption does not apply to us — we are a service provider, not the employer.

Customer responsibilities: Employers (our customers) are responsible for notifying their employees about data collection under APP 5.

GDPR: This policy addresses Australian privacy law. GDPR does not apply as we operate in Australia for Australian customers only.

11. Changes to This Policy

We may update this policy. Material changes will be notified to customers via email.

12. Contact

On Pulse Enterprises Pty Ltd
9 Moncrieff St, Dickson ACT 2602

Privacy: privacy@pulsity.io
General: support@pulsity.io

This policy complies with the Privacy Act 1988 (Cth) and Australian Privacy Principles.