Privacy Policy

Overview

PulseFlow is an AI-powered SaaS platform that transforms YouTube videos into social media content. This policy explains what we collect, how we use it, and how we keep it secure.

Cookies and authentication

We use essential cookies and local storage to keep you signed in and to protect your account. These session cookies are required for authentication and are managed through Supabase Auth. We do not use third-party advertising cookies.

Information we collect

• Account email and authentication data via Supabase
• YouTube URLs, generated content, credits, and optional settings (brand voice, Telegram channel)
• Payment metadata processed by Stripe (we never store full card numbers)
• Optional feedback you submit (rating, comment, optional contact)
• Limited technical metadata for abuse prevention (e.g. truncated IP address on feedback submissions)

Data minimization and retention

We collect only what is needed to run the product. YouTube URLs and generated content are stored to power your dashboard history. Feedback is retained for product improvement and may be deleted on request. Account data is removed when you delete your account.

Your rights

You may request access, correction, or deletion of your personal data. Contact us at the address below and we will respond within 30 days where applicable under GDPR and similar laws.

Data security

User data is stored in Supabase with row-level security policies. Access to your profile, credits, and generation history is restricted to your authenticated session. API keys for AI and messaging services are kept server-side and are never exposed to the browser. We use HTTPS everywhere, validate and size-limit API requests, rate-limit abuse-prone endpoints, and return generic error messages to clients while logging details server-side.

Third-party services

We use Supabase (auth and database), Stripe (payments), OpenRouter (AI generation), and Telegram (optional publishing). Each provider processes data under their own policies and our data agreements.

Contact

Questions or data requests: privacy@pulseflow.app