Privacy Policy

Who runs Pulse

Pulse is a private operations portal run by Thrive. It is used only by people Thrive has invited, who may work for Thrive or for other organizations Thrive works with. Pulse is not a public service. It is used to monitor assets, track tickets and run operations work.

What Pulse collects

• From Google sign-in: your name and email address. Sign-in requests the standard openid, email and profile scopes — Pulse does not request access to your mail, calendar, files or any other Google data as part of sign-in.
• Your account record: name, email address, a role that sets what you can see and do in Pulse, when your account was created, and when you were invited.
• What you enter in the portal: the monitoring, ticketing, payments and other operational information Pulse is built to record, as part of using it.
• Sign-in attempts that are refused. When a sign-in is denied — an address outside an approved sign-in domain, or an account that has not been invited — Pulse keeps a record of when it happened, why, the email address and user id involved (where known), and the requesting IP address and browser user agent. This exists so a Pulse admin can tell whether an invite worked.
• Session cookies. Signing in sets a session cookie (via Supabase) that keeps you signed in. It is a functional cookie, not a tracking or advertising cookie.
• Hosting-provider logs. Pulse runs on Vercel, which — like any web host — keeps ordinary request logs (timestamps, IP addresses, requested paths) as part of serving the application.

Pulse does not run analytics, advertising or tracking scripts, and does not use third-party trackers or error-reporting services.

What it is used for

Information collected through Pulse is used to run Thrive’s operations: signing in the people Thrive has invited, assigning roles and access, recording and monitoring asset and ticket data, and understanding and fixing sign-in problems. It is not sold, and it is not used for advertising.

Who processes this information

Pulse uses a small number of service providers to operate: Vercel hosts the application, Supabase provides the database and sign-in infrastructure, and Google provides sign-in. Each processes information only as needed to provide its service to Pulse.

Retention and deletion

Account and operational records are kept for as long as your account is active and as needed for Thrive’s operations. Records of a denied sign-in attempt are kept so an admin can review them. If you would like a copy of the information Pulse holds about you, or would like it removed, contact us at the address below and we will look into what we can do.

Your choices

You can ask us what information Pulse holds about you, ask us to correct it, or ask that your access be removed. Reach out using the contact address below.

Changes to this policy

We may update this policy as Pulse changes. The date at the top of this page shows when it was last updated.

Contact

Questions about this policy, or about your information, can be sent to joseph.heywood@thrivepower.com.