Privacy Policy

1. Who We Are

PulseWave Labs ("we," "us," "our") operates the PulseWave trading signal platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, platform, Telegram bot, and related services (the "Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Information You Provide

• Account registration: Email address, password (hashed, never stored in plaintext)
• Telegram linking: Telegram user ID and chat ID (when you connect via our bot)
• Payment information: Processed by Whop — we do not store credit card numbers, CVVs, or full card details
• Communications: Any messages you send to our support

Information Collected Automatically

• IP address, browser type, device type, operating system
• Pages visited, features used, timestamps, session duration
• Referral source (how you found us)
• Cookies and similar tracking technologies (see Section 7)

Information We Do NOT Collect

• Exchange API keys, passwords, or credentials
• Your exchange balances, positions, or trading history
• Any information that would give us access to your funds

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Deliver trading signals to your Telegram account
• Process subscription payments
• Send account-related communications (billing, security, service updates)
• Respond to support requests
• Improve our platform, fix bugs, and develop new features
• Detect and prevent fraud, abuse, or unauthorized access
• Comply with legal obligations
• Send marketing communications (only with your consent; you can opt out anytime)

4. Information Sharing

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

Service Providers

We use trusted third-party providers to operate our Service:

• Supabase: Database hosting and authentication
• Vercel: Website hosting and deployment
• Railway: Signal engine hosting
• Whop: Payment processing and subscription management
• Telegram: Signal delivery

These providers process data solely on our behalf and are contractually bound to protect it.

Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of PulseWave Labs, our users, or the public.

5. Data Security

We implement industry-standard security measures:

• All data transmitted over HTTPS/TLS encryption
• Passwords hashed using bcrypt (never stored in plaintext)
• Database access restricted with Row Level Security (RLS) policies
• Service role keys stored as encrypted environment variables
• No storage of payment card details (handled entirely by Whop)

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Account data: Retained while your account is active and for 30 days after deletion request
• Payment records: Retained for 7 years for tax and legal compliance
• Usage logs: Retained for 12 months, then deleted or anonymized
• Support communications: Retained for 2 years

7. Cookies

We use cookies for:

• Essential cookies: Authentication, session management (required for the Service to function)
• Analytics cookies: Understanding usage patterns to improve the platform

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit processing of your data

To exercise any of these rights, contact us at hello@pulsewavelabs.io. We will respond within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

10. International Users (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:

• Contract performance: Processing necessary to provide the Service
• Legitimate interests: Improving our platform, preventing fraud
• Consent: Marketing communications
• Legal obligation: Tax and regulatory compliance

Your data may be transferred to and processed in the United States. We ensure adequate protection through appropriate safeguards as required by GDPR.

11. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected data from someone under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or platform notification. The updated policy becomes effective 14 days after posting unless otherwise stated. Continued use of the Service constitutes acceptance.

13. Contact

Privacy questions or data requests: hello@pulsewavelabs.io