Privacy Policy

What this covers

This describes what HTMB Pulse ("we", "us") collects when you use the app at htmb-pulse.vercel.app, and what we do with it. It covers your own account data and, separately, the prospect data you choose to enter into the product.

Information you give us

• Account details - name, email address, and password (handled by our authentication provider, Supabase Auth - we never see your password in plain text), plus optional profile fields like your timezone and a description of what you offer, used to personalize AI-generated outreach and content.
• Prospect data - names, job titles, companies, industries, locations, LinkedIn profile URLs, and notes you enter or import about people you are considering reaching out to.
• Content you create - outreach drafts, content posts, and any edits you make to AI-generated suggestions.
• Billing information - your subscription plan and payment status. Card and payment details are handled entirely by Razorpay; we never receive or store your full card number.

Information from LinkedIn

If you connect your LinkedIn account, we receive your LinkedIn member identifier and the specific permissions (scopes) you grant during that connection, and we use them solely to publish content you explicitly schedule or publish through HTMB Pulse. The access token is stored encrypted; disconnecting LinkedIn from Settings stops us from being able to use it.

Information collected automatically

Standard technical logs (timestamps, request paths, error details) are generated by our hosting provider, Vercel, as part of running the application, and we use basic usage counters internally to enforce plan limits and show you your own usage. We do not run third-party advertising trackers or sell any data to advertisers.

How we use this information

To operate the product: score prospects, draft outreach and content with AI, publish what you approve to LinkedIn, calculate your fit scores and weekly insights, run billing, enforce plan limits, and provide support when you write in. If you configure an outbound automation webhook (Settings, optional), the events you enable are sent to the destination you choose - either HTMB Pulse's own built-in receiver, or an external tool you control. We do not use your data to train AI models.

Who we share information with

We don't sell your data. We share it only with the services that make HTMB Pulse work, each acting as a processor on our behalf:

• Supabase - database, authentication, and file storage. Your data is hosted in Supabase's Mumbai (ap-south-1) region.
• Vercel - application hosting and serverless execution.
• Razorpay - payment processing for subscriptions.
• OpenRouter and the underlying AI model providers it routes to - process prospect and profile details you supply, only as needed to generate a score, draft, or insight for you. This can involve sending data to AI infrastructure outside India.
• LinkedIn - receives what you explicitly publish or send through it, per the connection above.

We may also disclose information if required by law, or to protect the rights, safety, or property of HTMB Pulse or our users.

Data security

LinkedIn access and refresh tokens are encrypted at rest. Your data is protected by row-level security policies in our database, meaning your account can only ever read its own data - not another customer's. No method of storage or transmission is perfectly secure, and we can't guarantee absolute security.

How long we keep information

We keep your account and prospect data for as long as your account is active. If you close your account, write to htmbai@proton.me and we will delete your account data, other than what we are required to keep for legal, tax, or billing record-keeping purposes.

Your rights

You can access, correct, export, or delete your own account and prospect data directly within the app for most of it, or by writing to htmbai@proton.me. If you are in India, this is in addition to, and does not limit, any right you have under the Digital Personal Data Protection Act. If you are elsewhere and a different data protection law applies to you, write to us and we will address your request under that law.

Prospect data you enter

If you enter information about a prospect who is not you, you are the one responsible for having a lawful basis to hold and process it, per our Terms of Service. If a prospect contacts us directly about data you entered about them, we will refer them to you as the party who added it, and remove it from our systems on your instruction or theirs where legally required.

Children

HTMB Pulse is a business tool and is not directed at, or knowingly used by, children.

Changes to this policy

We may update this policy as the product changes. We will update the effective date above when we do.

Governing law

This policy is governed by the laws of India. It is provided as a plain statement of our data practices and has not been reviewed by outside counsel; nothing here limits any right you have under applicable data protection law that cannot be waived by agreement.

Contact

Questions about this policy, or to exercise any of the rights above: htmbai@proton.me.