Privacy Policy
Effective date: October 19, 2026 · Last updated: October 19, 2026
The short version
Pulsekit is a service at getpulsekit.com, run by Pathnext Industries, LLC ("Pulsekit", "we"). It serves businesses in the United States only.
- What we collect from you. What you type into our forms, such as your email and website, plus a small amount of technical data. In our own database we store IP addresses only as a one-way hash. Our advertising and analytics partners receive your IP address and device information (section 6).
- What our scanner reads. Public web pages only. It honors robots.txt and never logs in, submits forms or tries passwords.
- Payments. Our payment processor, Stripe, handles card payments. We never see or store your full card number.
- Advertising and analytics. We share information with Meta and Google for advertising. We use their advertising and analytics tags on our website so they can measure our ads and show them to people likely to want Pulsekit. Under the California Consumer Privacy Act (as amended by the CPRA), Washington law and other state privacy laws, this can count as "sharing" personal information, "targeted advertising" and possibly a "sale". We treat it that way. You can opt out with our Do Not Sell or Share My Personal Information page or a Global Privacy Control signal (section 7). We never sell your email address or share it for advertising. Our ad tags send Meta and Google information about your device and visit, such as your IP address, the pages you view, the actions you take and cookie IDs. See section 6.
- Your rights. Email hello@getpulsekit.com to access, correct or delete your information.
1. Information we collect
Information you give us
| Where | What we collect |
|---|---|
| Waitlist form | Your email, any details you choose to add, and how you reached the form. |
| Free checkup | The website address, your email if you ask us to send the report, and a record that you confirmed you own the site or are authorized to check it. |
| Account | Your email, optional profile details, the websites you add and any competitor websites you enter. |
| Purchases | Our payment processor collects your payment details directly. We keep a record of what you bought and your subscription and invoice status. |
| Messages and ideas | Whatever you send us, including opt-out and do-not-scan requests. |
Information we collect automatically
- Hashed network identifiers. We turn your IP address into a one-way hash and use it for rate limits and to stop abuse. We don't store the raw IP address in our database. Meta and Google receive it through the tags described in section 6.
- Server logs. Our hosting provider keeps standard request logs, which can include IP addresses, for a limited time.
- Cookies and advertising tags. See section 6.
Information from public sources
When a checkup runs, we collect publicly available information about the website and the business, from the site itself and from third-party data providers. Most of it is business information. Some can include personal information that is already public, such as a staff member's name on a website.
We use it to produce reports, including comparisons with other businesses, to compile aggregate statistics (we publish only aggregates), and for our own research and outreach.
Google services. We use Google services, including the Places API and YouTube API Services, to find public information about a business. We don't save Google ratings, review counts or reviews. If you ask on your results page, we show your own current rating live from Google. Your results page can also show an embedded Google map; loading it sends Google your IP address, browser details, our site's address and the places the map shows, but not the address of your results page, and Google may set its own cookies inside the map. Google's Privacy Policy is at policies.google.com/privacy.
Business contacts. To tell businesses about Pulsekit, we collect business contact names and email addresses from business-contact data providers and public sources. Anyone we contact can opt out at any time.
If a report mentions your business. Reports can name other businesses, such as a customer's competitors. If you think something about your business is wrong, email us and we'll review it.
2. Our scanner
Our scanner identifies itself as PulsekitBot. It reads public pages only and honors robots.txt. It never logs in, submits forms, tries passwords or bypasses access controls.
Site owners can find details and opt out at getpulsekit.com/bot, or by emailing hello@getpulsekit.com. We stop visiting the site within 2 business days.
3. How we use information
- To provide the service: run checkups, produce and deliver reports, show your account and process payments.
- To sign you in: we email you a sign-in link, which sets a session cookie.
- To send service email: reports you asked for, sign-in links, and billing and service notices.
- To send marketing email: product updates if you signed up for them, and email to businesses we think Pulsekit could help.
- To improve and test Pulsekit: understand what people want, review submitted ideas, and compare versions of our offer (section 6).
- To advertise Pulsekit: measure which ads lead people to start a free checkup, sign up or start checkout, and let Meta and Google use that to improve who sees our ads (section 6).
- To keep the service safe: rate limits, spam and bot checks, and preventing abuse.
- To meet legal obligations: tax, accounting and lawful requests.
AI services. We use AI service providers to help produce reports. We send them business information such as the business name, city, category and website excerpts. We don't send your account email or payment details.
What we don't do. We don't use personal information to train AI models. We don't make decisions about individuals with legal or similarly significant effects based solely on automated processing. We do use advertising tags from Meta and Google (section 6). We treat this as sharing personal information for cross-context behavioral advertising and as targeted advertising, and it may also count as a sale. You can opt out (section 7).
4. Who we share information with
We share information with service providers that help us run Pulsekit, only what each one needs, and with the advertising and analytics partners in section 6:
- hosting and database providers;
- our payment processor, Stripe;
- an email delivery provider;
- AI service providers;
- data and search providers, including Google;
- a security provider that tells people from bots on our forms;
- a business-contact and outreach provider;
- advertising and analytics partners (Meta and Google): page views, the actions listed in section 6, device and browser information, cookie IDs and IP address. They are third parties for this use, not our service providers. They use the information under their own terms and privacy policies, including to improve their ad services. When you opt out or send a Global Privacy Control signal, we don't load the Meta Pixel or the Google tag and our server sends Meta nothing for your visits, as described in section 6. If you opt out after the tags have already loaded on a page, we also switch the Meta Pixel to Meta's Limited Data Use mode (which limits how Meta can use the data) and turn the Google tag off for the rest of that page.
A current list of providers is available on request.
We may also disclose information to comply with the law or a valid legal request; to protect the rights, safety and property of Pulsekit, our users or others; and to a buyer or successor if Pulsekit is involved in a merger, acquisition or sale of assets. This policy continues to apply to information that is transferred.
5. How long we keep information
These are the periods within which we aim to delete information.
| Information | We aim to delete it within |
|---|---|
| Waitlist signups and marketing contacts | 24 months after our last contact, or sooner if you unsubscribe or ask |
| Free checkup results (no account) | 12 months |
| Account, sites, subscriptions and reports | 24 months after your account closes, or sooner if you ask |
| Billing and purchase records | As long as tax and accounting law requires, generally 7 years |
| Security and rate-limit records | 30 days |
| Research and outreach records | 12 months, or sooner if the business opts out or asks |
| Opt-out and unsubscribe records | As long as needed to keep honoring the request |
6. Cookies and ad tags
- Sign-in cookie. Keeps you signed in for 30 days after you click an emailed sign-in link. It is strictly necessary.
- Offer-test cookies. While we compare versions of our offer, first-party cookies remember which version you saw and let us count visits, clicks and purchases for each version. They last 90 days and aren't used for advertising or to track you on other sites. If you buy, the version you saw is saved with your purchase. We delete test records within 12 months after a test ends.
- Provider cookies. Our payment processor sets its own cookies on its checkout pages, and our bot-check provider may set one on forms that use it.
- Privacy-choice cookies. If you opt out on our Do Not Sell or Share My Personal Information page, a first-party cookie (
pk_privacy_optout) remembers that choice on that browser for 1 year. If we ask for your consent to advertising and analytics cookies, a first-party cookie (pk_ad_consent) remembers your answer for 1 year. If your browser reports a Global Privacy Control signal, a first-party session cookie (pk_gpc) passes that signal to our server until you close your browser or turn GPC off.
Advertising and analytics tags. We use these on our website:
- Meta Pixel (Meta Platforms), with the Meta Conversions API described below
- Google tag, including Google Analytics 4 and Google Ads (Google). We may use either or both.
When you visit, they can collect: pages you view; actions such as starting a free checkup, signing up for emails and starting checkout; device and browser information; cookie IDs; your IP address; and, if you came from an ad or a link with campaign tags, the ad click ID and the campaign tags in the link (such as utm_source). They set these cookies:
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
_fbp | Meta | Identifies your browser to Meta for measuring and delivering ads | Up to 90 days, renewed when you visit |
_fbc | Meta | Records the Meta ad click that brought you here, only if you came from one | Up to 90 days |
_ga | Distinguishes visitors for Google Analytics | Up to 400 days (about 13 months), renewed when you visit | |
_ga_* | Keeps the state of your Google Analytics session | Up to 400 days (about 13 months), renewed when you visit | |
_gcl_* (for example _gcl_au, _gcl_aw, _gcl_gb, _gcl_ag, _gcl_dc, _gcl_gs), and Google's partitioned GCL_AU_P and GCL_AW_P | Google advertising cookies that link visits to Google ads and record the Google ad click that brought you here, if you came from one, only when ad storage is allowed | Up to 90 days | |
_gac_* (for example _gac_gb_<id> and _gac_<id>) | Google Analytics and Google Ads advertising measurement, such as which Google ad campaign brought you here, because our Google Analytics is linked to Google Ads, only when ad storage is allowed | Up to 90 days |
From our server (Meta Conversions API). When you view a page that loads our ad tags, or start a free checkup, sign up for emails or start checkout on such a page, our server also sends Meta a record of that event: your IP address, browser user-agent, Meta cookie IDs and the page address without its query string. Each event carries an event ID so Meta counts it once. We do not send your email address or phone number, hashed or not, and we do not send the website you checked or anything from your reports.
Pages without tags. The tags don't run on pages that show scan results, your account, checkout or reports, or on our unsubscribe, unblock, sign-in and privacy-choices pages, or on any page whose web address includes parameters other than standard advertising campaign ones (utm_source, utm_medium, utm_campaign, utm_term, utm_content, utm_id, gclid, gbraid, wbraid, fbclid). We don't send health information to Meta or Google, and we don't use the tags to collect it.
Visitors outside the 50 US states and the District of Columbia. Pulsekit is offered only in the United States, and we only load ad tags when our location check, which is based on your IP address and isn't always accurate, places you in one of the 50 US states or the District of Columbia. If it places you anywhere else (including US territories such as Puerto Rico or Guam), or can't tell where you are, we don't load the Meta Pixel or the Google tag, and our server sends nothing to Meta for your visit. As a backup, if the Google tag ever loads for a visitor outside the 50 states and the District of Columbia, it's set so that, by default, ad storage, analytics storage, ad user data and ad personalization are all denied.
Meta and Google may combine this information with other information they hold about you, under their own privacy policies (links in section 7).
Browser signals. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of sale, sharing and targeted advertising, the same as our opt-out page: we don't load the Meta Pixel or the Google tag (including Google Analytics), and our server sends Meta nothing for your visit. If you opt out on our opt-out page after the tags have already loaded on a page, we switch the Meta Pixel to Meta's Limited Data Use mode (which limits how Meta can use the data), turn the Google tag off and stop sending events. With GPC on, we leave you out of offer tests. We don't currently respond to "Do Not Track" signals, because there is no common standard for them. Use Global Privacy Control or our opt-out page instead.
7. Your choices and rights
Your choices about advertising and analytics.
- Do Not Sell or Share My Personal Information. Use the Do Not Sell or Share My Personal Information link in our site footer. It records your opt-out in a cookie on that browser and turns the advertising tags off, the same as a Global Privacy Control signal (section 6). If you clear your cookies or use another browser, opt out again there.
- Global Privacy Control. Turn on GPC in your browser or a privacy extension. We treat it as an opt-out of sale, sharing and targeted advertising (section 6).
- Browser settings. You can block or delete cookies, or block third-party cookies, in your browser settings. Pulsekit still works, though signing in needs our sign-in cookie.
- Meta. Control the ads you see in Meta's Accounts Center ad preferences, and read Meta's Privacy Policy: https://www.facebook.com/privacy/policy
- Google. Control ad personalization at https://myadcenter.google.com, and see how Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites. You can also install the Google Analytics opt-out add-on: https://tools.google.com/dlpage/gaoptout. It doesn't affect the Google Ads tag; use our Do Not Sell or Share My Personal Information page or Global Privacy Control for that.
Everyone. Email hello@getpulsekit.com to access, correct, export or delete your personal information, or to stop marketing email. If a marketing email from us includes an unsubscribe link, you can use that too. We verify a request by confirming it from the email address on file, and respond within 30 days. Deleting some information may mean we can't provide the service. We keep the billing records the law requires.
California residents. You have the right to:
- know what personal information we collect, where it comes from, why we use it and who we disclose it to;
- delete personal information we collected from you, with legal exceptions;
- correct inaccurate personal information;
- opt out of the sale or sharing of personal information, and of targeted advertising. Starting October 19, 2026, we share personal information with Meta and Google for advertising (section 6), which may also count as a sale. Use our Do Not Sell or Share My Personal Information page, Global Privacy Control or the choices above;
- limit the use of sensitive personal information. We don't collect it to infer characteristics about you;
- not be treated differently for using these rights.
In the last 12 months we collected identifiers (email, name, hashed IP; and, through advertising tags, IP address and cookie IDs), commercial information (purchases and subscriptions), internet activity (form submissions, page views and clicks counted for offer tests, and page views and actions collected by advertising and analytics tags) and professional information (role, company, company size). Shared for cross-context behavioral advertising, and possibly sold: identifiers (IP address and cookie IDs, never your email address) and internet activity, with Meta and Google. Sources, purposes and recipients are in sections 1, 3 and 4. An authorized agent may make a request for you with your signed permission.
Washington and other states. If you live in Washington or another state whose law lets you opt out of targeted advertising, sale or sharing, you can opt out the same ways: our Do Not Sell or Share My Personal Information page or Global Privacy Control. Email hello@getpulsekit.com to use any other rights your state's law gives you.
Outside the United States. Pulsekit is offered to US businesses only, and we process information in the United States. If you're outside the US and contact us about your information, we'll handle your request as this policy describes.
8. Security, children, changes and contact
Security. We use HTTPS everywhere, signed and expiring links for sign-in and reports, hashed IP addresses, and access controls on our systems and providers. Security findings about a website are shown only in reports for sites on a Pulsekit plan. No system is perfectly secure. If we learn of a breach affecting your personal information, we'll notify you as the law requires.
Children. Pulsekit is a business service. It isn't directed to children, and we don't knowingly collect personal information from anyone under 18.
Changes. We'll post changes here and update the date at the top. If a change is material, we'll tell account holders and waitlist subscribers by email or with a notice on the site before it takes effect.
Contact.
Pathnext Industries, LLC, operator of Pulsekit
Mailing address: 3225 McLeod Dr, Suite 100, Las Vegas, NV 89121
Email: hello@getpulsekit.com