Privacy Policy

This policy explains what personal data Pulse Infinity Pte. Ltd. ("we", "us") collects through PulseSERP at serp.pulseinf.com, why we collect it, and how you can control it. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).

1. Who we are

PulseSERP is operated by Pulse Infinity Pte. Ltd., a company registered in Singapore. For any privacy question or request, contact our Data Protection Officer at hello@pulseinf.com.

2. What we collect

• Account details: your name, email address, company name (if you give one) and password. Passwords are stored only as a one-way hash; we can't read them.
• If you sign in with Google or Microsoft: your name, email address, and the account identifier that Google or Microsoft gives us, so we can recognise you next time. We don't receive your Google or Microsoft password.
• What you track: the website addresses, keywords, countries and devices you add, and the positions we record for them.
• Google Search Console data: only if you connect it. See section 4.
• Usage and security records: your IP address, browser type, sign-in times, and actions such as rank checks and credit use. We use these to keep accounts secure, prevent abuse and fix problems.
• Emails we send you: such as verification, password reset and account notices.

We do not collect payment card details in PulseSERP at this time.

3. How we use it

• To create and run your account, and to sign you in securely.
• To show where your website ranks for the keywords you choose. Positions come from your Google Search Console data (section 4) or, if your plan includes live Google checks, from a search results provider (section 5).
• To show history charts, the page that ranks for each keyword, and keyword suggestions.
• To send the weekly ranking report to the people on your account, unless they turn it off.
• To manage your plan, credits and limits.
• To send you service emails. We don't send marketing emails without your consent.
• To protect PulseSERP and its users, for example by rate-limiting sign-ins and blocking abuse.
• To meet legal obligations.

4. Google Search Console data

If you connect Search Console, you either sign in with Google or add a PulseSERP-specific email address as a user of your Search Console property. Either way, PulseSERP gets read-only access. It cannot change anything in your Google account or Search Console.

We read:

• the list of Search Console properties your access covers, to find the website you added;
• search performance data for that website: search queries, the pages of your website that appeared, clicks, impressions, average position, date, country and device. We import up to 90 days when you connect, and each new day after that;
• if you sign in with Google, your Google account email address, so you can see which account is connected.

We use this data only to provide PulseSERP's features to you, inside your own account:

• to work out and show the position of each keyword you track, its history, and which page of your website ranks for it;
• to show your clicks and impressions, and to suggest keywords from the searches your website already appears for;
• to include those positions in the weekly report emailed to the people on your account.

It is stored on PulseSERP's servers, separately for each account, and is never shown to other customers.

PulseSERP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we do not sell Google user data or use it for advertising;
• we do not use it to train artificial intelligence or machine learning models;
• we do not transfer it to anyone else, except as needed to provide PulseSERP's features, to comply with the law, or as part of a merger or sale of the business with notice to you;
• our staff do not read it, except with your permission, to investigate security issues or abuse, to comply with the law, or in aggregated form for internal operations.

When you sign in with Google, we store an access token in encrypted form. When you disconnect Search Console, we delete its imported data from PulseSERP, together with the positions and ranking pages worked out from it, and, if no other website in your account uses that connection, delete the token and ask Google to revoke it. You can also remove PulseSERP's access at any time from your Google account or from Search Console's user settings.

5. Who we share data with

We don't sell personal data. We share it only with:

• Search results providers: only if your plan includes live Google checks. To check a ranking, we send the keyword, country, language and device to a third-party search data provider (DataForSEO). No personal data and no Search Console data is included.
• Google and Microsoft: when you choose to sign in with them, and Google when you connect Search Console, as described in section 4. Their own privacy policies apply to your use of their sign-in.
• Bot protection: if enabled on the sign-up form, Cloudflare Turnstile checks that a real person is signing up.
• Authorities: where the law requires it.

Live search results are public pages that anyone can see on Google. We store them once and use them for every customer who tracks the same search; your account details are never attached to them. Search Console data is never shared in this way.

Emails, including the weekly report, are sent from our own mail server.

6. Where data is stored and how it's protected

PulseSERP runs on servers operated by Pulse Infinity Pte. Ltd.. Connections to PulseSERP are encrypted with HTTPS, passwords are hashed, Google tokens are encrypted, and each customer account can only see its own data.

7. How long we keep it

• Account details and tracking history: while your account is open.
• Search Console data, and the positions worked out from it: until you disconnect Search Console, remove the website, or close your account.
• Full search result pages: up to 90 days. Your ranking history is kept as positions only.
• Security records: for as long as needed to protect the service and meet legal obligations.

When you close your account, we delete your personal data within 30 days, unless we must keep some of it by law.

8. Cookies

PulseSERP uses only the cookies needed to run the service: a session cookie that keeps you signed in, a security cookie that protects forms, and a "keep me logged in" cookie if you choose that option. We don't use advertising or tracking cookies.

9. Your rights

Under the PDPA you can ask us to:

• tell you what personal data we hold about you and how it has been used;
• correct personal data that is wrong or incomplete;
• stop using your personal data, by withdrawing consent. Some features may then stop working;
• close your account and delete your data.

You can update your name, email and password yourself under Settings. For anything else, email hello@pulseinf.com. We aim to reply within 30 days.

10. Changes

If we change this policy, we'll update the date at the top. If the changes are significant, we'll let you know by email or in PulseSERP before they take effect.