Privacy Policy

1. What PulseIQ is

PulseIQ is a personal prototype web application operated by Richard Robinson, operating Pulse IQ. It helps the operator research ideas, plan and prepare short-form video projects, assemble media, and publish to connected platforms such as YouTube and TikTok when those features are explicitly enabled and confirmed.

PulseIQ is not currently offered as a public paid business product. These pages describe practices for the live prototype at pulse-iq.cc. They do not claim third-party certifications, SOC 2, HIPAA, or similar attestations.

2. Information you supply

Depending on how you use PulseIQ, you may provide:

• Account information such as email address and display name
• Organization, workspace, and Project information
• Creative Spec, scripts, storyboards, and related metadata
• Uploaded or selected media used in preparation and assembly
• Publishing package metadata you enter (titles, captions, privacy choices)

3. Application and infrastructure data

PulseIQ also processes:

• Authentication and session data needed to keep you signed in
• Workspace and tenant identifiers used for isolation
• Job, Progress, pipeline, and audit-lineage records
• Security, diagnostic, and operational logs (without storing passwords, OAuth authorization codes, or plaintext provider tokens in ordinary logs)
• Usage and budget telemetry where those features are enabled

4. Connected platform accounts (YouTube and TikTok)

When you deliberately connect a YouTube or TikTok account through the in-product OAuth disclosure and provider consent screen, PulseIQ may process:

• Account identity metadata returned by the provider (for example channel or open_id identifiers, display name, username/handle, and avatar references when returned)
• Granted OAuth scopes
• OAuth access and refresh tokens, stored encrypted server-side using authenticated encryption (AES-256-GCM) with a server-only vault key—not in plaintext database columns or client bundles
• Videos and post metadata you explicitly choose for owner-approved publishing, plus provider upload/publish status identifiers needed to show history

PulseIQ does not receive your Google or TikTok password. Connection is optional and occurs only after you continue from the disclosure and complete provider consent.

5. How connected-platform data is used

Use is limited to features you request, such as:

• Connecting and verifying the selected account
• Identifying the publishing destination
• Uploading or Direct Posting a video you explicitly confirm (when that feature switch is enabled)
• Checking upload or publish status
• Displaying publication history in your workspace
• Refreshing authorization when permitted
• Disconnecting and supporting revocation where available

PulseIQ does not automatically publish publicly without owner action. Publish Now and similar actions require deliberate confirmation. Feature switches can keep publishing disabled even when an account remains connected.

PulseIQ's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. TikTok use follows the scopes and products you authorize in the TikTok Developer Portal and Login Kit / Content Posting consent flow.

6. Storage and security

• Provider tokens are sealed in encrypted credential envelopes with key versioning.
• Provider API calls are intended to run server-side.
• Tenant isolation scopes access by organization and workspace membership.
• Media objects are stored privately; signed URLs are ephemeral, not permanent public columns.

No system is perfectly secure. Reasonable measures are used; absolute security is not guaranteed.

7. Sharing and sale of data

PulseIQ uses infrastructure categories such as cloud hosting, managed databases, private object storage, AI providers when those features are used, and connected publishing platforms after you authorize them. Current infrastructure includes providers such as Vercel, Neon, and Vercel Blob, and may include other configured services.

We do not sell your personal information. We do not sell connected YouTube or TikTok account data.

8. Retention

• Provider credentials: removed or revoked on disconnect according to implemented disconnect flows.
• Publishing history and Progress: may be retained for workspace history while the Project exists.
• Immutable audit / lineage / security records: may remain for integrity and accountability even when editable content or credentials change. Not every record can be deleted.
• User-created content: retained while your account and Projects exist, subject to deletion requests and product capabilities.

9. Disconnect and deletion

You can disconnect connected platforms from PulseIQ publishing controls when those flows are available, and you can revoke third-party access in the provider account settings (for Google, see myaccount.google.com/permissions; for TikTok, use TikTok's account permission / connected-apps controls).

See Data Controls for disconnect, deletion requests, and related controls. To request data deletion, email support@pulse-iq.cc.

10. Children

PulseIQ accounts and the service are intended for people age 18 or older. If you are under 18, do not create an account or use PulseIQ.

11. Changes and contact

This policy may change as the prototype changes. Material updates are reflected by revising this page and the effective date.

Questions: support@pulse-iq.cc.