Privacy Policy.

This Privacy Policy explains how H7 Pulse Enterprise Ltd. (“H7 Pulse”, “we”, “us”) collects, uses, and protects your information when you use our website at h7pulse.com, our client portal, and the H7Pulse WA API Integrationand related services (together, the “Service”).

We’ve written it to be clear and honest. By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

We collect only what we need to run the Service and support you:

• Account information — your name, email address, and the password hash created when you register.
• Google Sign-In data — if you choose to sign in with Google, we receive your name, email address, profile picture, and Google account identifier, used solely to authenticate you and create or access your account.
• Gateway data — phone numbers, session metadata, delivery status, and message logs you route through the H7Pulse WA API Integration so the Service can function and so you can audit your own usage.
• Wallet & billing — wallet balance, transaction history, and the payment proof you upload for top-ups. We do not store full card numbers.
• Technical data — IP address, device and browser type, and usage telemetry used for security, fraud prevention, and improving reliability.

We use your information to:

• Provide, operate, and maintain the Service and your account.
• Authenticate you and keep your account and data secure.
• Process wallet top-ups, apply usage charges, and keep accurate records.
• Respond to your support requests and send essential service notices.
• Detect, prevent, and address abuse, fraud, and security incidents.
• Comply with our legal and regulatory obligations.

We do not sell your personal information, and we do not use it for advertising or targeting.

When you sign in with Google, our use of the information we receive follows Google’s requirements:

H7 Pulse’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google profile data only to authenticate you and create or access your account.
• We never sell Google user data, and we never use it for advertising.
• We do not transfer Google user data to third parties except as necessary to provide the Service, comply with the law, or as part of a merger that remains subject to this policy.
• We do not allow humans to read your Google data unless you ask us to for support, we need it for security, or the law requires it.

We share information only in these limited cases:

• Service providers — trusted infrastructure partners who process data on our behalf under contract, including Supabase (database & authentication), Cloudflare (hosting & network), and our email and payment providers.
• Legal requirements — when required by valid legal process or to protect our rights, users, or the public.
• Business transfers — if H7 Pulse is involved in a merger or acquisition, your data may transfer under the same protections described here.

We never sell your personal data to anyone.

We protect your data with encryption in transit and at rest, row-level access controls, scoped API keys, and optional two-factor authentication. No system is perfectly secure, but we work continuously to safeguard your information and to notify you promptly if a breach materially affects you.

We keep your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can delete your account at any time from your dashboard; deletion runs after a 14-day grace period during which signing back in cancels the request. After that window, your personal data is permanently removed except where we must retain limited records by law. You may also email us to request deletion.

Depending on where you live (including under GDPR and CCPA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (the “right to be forgotten”).
• Export your data in a portable format.
• Withdraw consent or object to certain processing.

To exercise any of these, contact us at support@h7pulse.com. We will respond within the timeframe required by applicable law.

We use essential cookies and browser local storage to keep you signed in, remember your theme and display preferences, and secure your session. We do not use third-party advertising or cross-site tracking cookies.

H7 Pulse operates globally and our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards to protect your data when it is transferred internationally.

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.