PULSE Privacy Policy

Last updated: October 13, 2026

PULSE ("the App") helps Shopify merchants confirm orders on WhatsApp, verify shoppers before checkout, take Cash-on-Delivery and InstaPay orders from a fast checkout sheet, and answer their customers' questions on WhatsApp. This page explains what customer data the App processes, why, who can see it, and how long it is kept.

What we collect

From Shopify, when a customer places an order: name, email address, phone number, shipping and billing address, and order details (items, prices, order number, tags).

From shoppers directly, only when the shopper uses a PULSE feature on a merchant's store:

• Checkout verification -- the phone number or email the shopper types to receive a one-time code, and the code's result. Codes are 6 digits, expire after 10 minutes, and are stored only as a one-way hash.
• Fast Checkout -- the name, phone, email, address, shipping area and discount code the shopper types into the checkout sheet. They become a normal order in the merchant's Shopify store. A shopper's earlier details (up to three profiles) are remembered on the shopper's own device only, in the browser, and are never sent to PULSE until the shopper uses them.
• InstaPay payments -- the screenshot of the transfer that the shopper uploads. It is kept in private storage that only the merchant (through PULSE) can open, so the merchant can check that the money arrived.
• WhatsApp conversations -- when a customer messages PULSE on WhatsApp (to see their orders, get an invoice, read the store's answers, or tap Confirm / Cancel), PULSE receives their phone number and message.
• Reviews -- the star rating and comment a customer chooses to leave.

From the merchant: store settings, FAQ answers, the list of contacts the merchant has blocked, and the store's own WhatsApp number if the merchant connects one.

Why we collect it

Only to provide the features above on the merchant's behalf:

• to send the customer a WhatsApp message confirming their order, with Confirm and Cancel buttons, and to update the order in Shopify with the answer;
• to send shipping updates, restock offers, review requests and order-follow-up messages the merchant has switched on;
• to check that a shopper owns the phone number or email they typed, before they check out;
• to create the shopper's Cash-on-Delivery or InstaPay order and let the merchant check the payment;
• to let a customer see their orders and download an invoice on WhatsApp, and to answer common questions with the merchant's FAQs;
• to flag an order that nobody replied to as high risk, or cancel it, when the merchant chose that setting.

We do not sell this data, and we do not use it for advertising, profiling, or any purpose beyond order communication.

Order lookup on WhatsApp

When a customer writes to PULSE's shared WhatsApp number, PULSE finds the orders linked to that same phone number in the stores that use PULSE, and shows them only to that phone number. A store never sees another store's orders, and nobody can look up a number that is not their own. A store that connects its own WhatsApp number shows its own orders and FAQs only. Invoices are PDF files created from the customer's own order and sent to the same phone number.

How it's stored

Data is stored in a dedicated Supabase (PostgreSQL) database and private file storage, encrypted at rest and in transit (HTTPS/TLS on every connection). Access is limited to the app operator; no other staff has access. Payment screenshots are never public: they are opened only through short-lived, signed links.

Service providers (sub-processors)

To run the App we rely on a small number of infrastructure providers. Each one processes data only to provide its service to us, and none uses it for its own advertising:

• Meta Platforms (WhatsApp Cloud API) -- delivers the WhatsApp messages to your customers. Receives the customer's phone number and the message content.
• Supabase -- database and private file storage for order, message and payment-screenshot records.
• Railway -- application hosting.
• Resend -- sends the emails: verification codes to shoppers who choose to verify by email, and order summaries and account alerts to the merchant's store email address. It sends nothing else to your customers.
• Shopify -- the platform the App is installed on, which supplies the order data and handles billing.

How long we keep it

• Order and message records, and InstaPay screenshots: 12 months, then automatically deleted. A screenshot that was uploaded but never used for an order is deleted after 24 hours.
• Verification attempts (the phone or email and the hashed code): deleted after at most 7 days.
• WhatsApp order-lookup and reply bookkeeping (phone numbers, used to avoid duplicate replies): 90 days.
• When a merchant uninstalls the App, all data tied to that shop, including payment screenshots, is deleted immediately.
• All data tied to a specific customer, including payment screenshots, is deleted when the customer's deletion request arrives (through Shopify's standard data request and redaction tools).

Merchants using the PULSE API

A business that sends its orders to PULSE through the Merchant API (instead of Shopify) is a merchant in the same way: the customer name, phone number, items and address it sends are used only to send that order's WhatsApp confirmation, and are kept under the same schedule.

Your rights

To request a copy of your data or its deletion, contact the merchant you ordered from -- they can trigger this through Shopify on your behalf. PULSE then sends the merchant a file with everything it holds about you, so they can answer you, or deletes it, including payment screenshots. You can also contact us directly at pulsse.studio@gmail.com.

Contact

Questions about this policy: pulsse.studio@gmail.com

← Back to pulseautomation.app