Privacy Policy

Last Revised: June 18th, 2026

This Privacy Policy explains how PushPulse, Inc. ("PushPulse," "we," "our," or "us") collects, uses, and shares personal information in connection with our website at https://pushpulse.com, our applications at https://app.pushpulse.com, our mobile and tablet applications, and our related services (collectively, the "Service").

This Policy works alongside our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service.

1. Our Two Roles: Controller and Processor

Because PushPulse provides a business platform, we handle personal information in two different capacities, and your rights and our responsibilities differ depending on which applies.

As a controller. For information we collect for our own purposes — such as information about website visitors, prospective customers, the administrators and personnel who manage a customer account, billing contacts, and people who contact us — PushPulse determines how and why that information is used. This Policy describes those practices.

As a processor (service provider). When an organization uses the Service (a "Customer"), it uploads and generates Customer Data, which may include personal information about its members, employees, students, volunteers, contacts, and the recipients of its notifications. We process that information on the Customer's behalf and under its instructions, as described in our Terms of Service and Data Processing Addendum. For that information, the Customer is the controller and is responsible for its own privacy practices, including providing notices and obtaining any required consents.

If you are an individual who received a notification, was added to a contact list, or otherwise interacted with an organization that uses PushPulse, that organization — not PushPulse — controls your information. Please direct privacy requests to that organization. We will support them in responding.

2. Definitions

  • Personal information / personal data: information that identifies, relates to, or could reasonably be linked to an identified or identifiable individual.

  • Customer Data: data that a Customer or its Authorized Users submit to or generate through the Service. See our Terms of Service.

  • Usage data: information collected automatically about how the Service is accessed and used.

  • Recipient: an individual to whom a Customer directs a notification or other communication through the Service.

3. Information We Collect as a Controller

Information you provide. When you create or administer an account, request a demo, contact us, subscribe to communications, or purchase the Service, we may collect your name, email address, phone number, organization, role, mailing address, and the contents of your communications with us.

Billing information. When you purchase a subscription, we collect billing details necessary to process payment. We do not store full payment card numbers; card data is handled by our payment processor (see Section 8).

Usage and device data. When you visit our website or use the Service, we automatically collect information such as IP address, browser and device type, operating system, device identifiers, pages viewed, referring pages, and dates and times of access, along with diagnostic and performance data.

Cookies and similar technologies. We use cookies and similar technologies on our website as described in Section 7.

4. Customer Data We Process on a Customer's Behalf

When an organization uses the Service, the personal information it processes may include, depending on the features it enables:

  • contact and recipient information, such as names, phone numbers, email addresses, and group or role assignments;

  • precise or approximate location data, where features such as geofencing, lone-worker timers, live operator location, or location-aware panic alerts are used;

  • audio, where push-to-talk or voice features are used, including recordings and transcriptions if the Customer enables them;

  • incident records, messages, forms, headcount and check-in data, uploaded documents and media, and related operational records;

  • visitor-management and screening data, where a Customer enables those features (for example, visitor sign-in or background-screening integrations); and

  • information about minors, where a Customer in an education, childcare, or ministry setting chooses to process it (see Section 12).

We process this information only to provide, secure, support, and improve the Service for the Customer and as instructed by the Customer. We do not sell Customer Data, and we do not use it to build advertising profiles or make it available to other Customers. We may use aggregated and de-identified data that does not identify any Customer or individual to operate and improve the Service.

5. How We Use Information

As a controller, we use personal information to:

  • provide, operate, maintain, and secure the Service and our website;

  • process transactions, manage subscriptions, and send account, billing, renewal, and administrative notices;

  • respond to inquiries, provide customer support, and communicate about the Service;

  • send marketing and promotional communications (which you can opt out of at any time — see Section 17);

  • analyze and improve the Service, develop new features, and monitor usage and performance;

  • detect, prevent, investigate, and address fraud, security incidents, abuse, and technical issues; and

  • comply with legal obligations and enforce our agreements.

We process Customer Data only as described in Section 4 and our Terms of Service and Data Processing Addendum.

6. Legal Bases (EEA/UK)

Where the EU or UK GDPR applies to processing for which we are the controller, we rely on one or more of the following legal bases: performance of a contract with you; our legitimate interests in operating and improving the Service and securing it (balanced against your rights); your consent (for example, for certain marketing or cookies, where required); and compliance with legal obligations. Where we process Customer Data as a processor, the Customer is responsible for establishing a legal basis.

7. Cookies and Similar Technologies

On our website we use cookies and similar technologies for purposes that include keeping you signed in, remembering preferences, maintaining security, and measuring and analyzing traffic. We may use analytics providers to understand how our website and Service are used.

You can control cookies through your browser settings; disabling some cookies may affect website functionality. Where required by law, we request consent for non-essential cookies. We do not use the in-application Service to serve third-party behavioral advertising.

8. How We Share Information

We share personal information only as described below. We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable U.S. state privacy laws.

  • Service providers (subprocessors). We use vendors to provide cloud hosting and infrastructure, communications delivery (such as SMS/text and voice carriers and aggregators), payment processing, analytics, error monitoring, and customer support. These providers may access personal information only to perform services for us and are bound by confidentiality and data-protection obligations. A current list of subprocessors is available on request or as published in connection with our Data Processing Addendum.

  • Payment processing. Payments are processed by a third-party processor (for example, Stripe), whose handling of your information is governed by its own privacy policy. Our processors maintain PCI-DSS compliance.

  • At a Customer's direction. Where we act as a processor, we share or disclose Customer Data as instructed by the Customer or as needed to provide integrations the Customer enables.

  • Legal and safety. We may disclose information where we believe it is required by law or valid legal process, or where reasonably necessary to protect the rights, property, or safety of PushPulse, our Customers, the public, or others.

  • Business transfers. If PushPulse is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

  • With consent. We may share information for other purposes with your consent.

9. Data Retention

We retain personal information for as long as needed to fulfill the purposes described in this Policy, to provide the Service, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. We retain Customer Data for the duration of the Customer's subscription and for the limited post-termination period described in our Terms of Service, after which we delete or de-identify it in the ordinary course, subject to legal retention requirements. Usage data is generally retained for a shorter period unless needed for security or legal reasons.

10. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, as described at https://pushpulse.com/security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Customers are responsible for configuring access controls, managing Authorized Users, and safeguarding account credentials.

11. International Data Transfers

PushPulse is based in the United States and processes personal information in the United States and in jurisdictions where our service providers operate. If you access the Service from outside the United States — including from Canada, the EEA, or the United Kingdom — your information may be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

12. Children's and Students' Privacy

The Service is intended for use by organizations and their adult personnel and is not directed to children. We do not knowingly collect personal information directly from children for our own purposes. If you believe a child has provided personal information to us as a controller, please contact us and we will take steps to delete it.

Some Customers — such as schools, childcare providers, and children's ministries — may choose to process personal information about minors as Customer Data (for example, classroom rosters, check-in records, or emergency contacts). In those cases the Customer is the controller and is responsible for compliance with laws that apply to children's and student data, including the Children's Online Privacy Protection Act (COPPA) and, for educational institutions, the Family Educational Rights and Privacy Act (FERPA), including obtaining any required parental or institutional consent. PushPulse processes such data only on the Customer's behalf under our Terms of Service and Data Processing Addendum.

13. Your Privacy Rights (EEA / UK)

Where the EU or UK GDPR applies and we are the controller, you have rights to access, correct, delete, and port your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. To exercise these rights, email support@pushpulse.com. We may need to verify your identity. You also have the right to lodge a complaint with your local data protection authority. Where we process your information as a processor on a Customer's behalf, please contact that Customer; we will assist them as required.

14. Your Privacy Rights (California — CCPA/CPRA)

If you are a California resident, you have the right to: know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients; correct inaccurate personal information; delete personal information; and not be discriminated against for exercising your rights.

In the preceding 12 months, we may have collected the following categories of personal information (as defined by the CCPA): identifiers (such as name, email, phone, IP address); customer records (such as billing and contact details); commercial information (such as subscription and transaction records); internet and network activity (such as usage and device data); and geolocation data (where location features are used). We collect this from you directly, automatically through your use of the Service, and from our Customers and service providers.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Accordingly, we do not offer a "Do Not Sell or Share" mechanism for sales, though you may still exercise the rights above. To the extent we process sensitive personal information (such as precise geolocation), we use it only to provide the Service and not to infer characteristics about you.

To exercise your rights, email support@pushpulse.com. You may use an authorized agent. We will verify your request and respond within the timeframes required by law. If we decline a request, you may appeal by replying to our response. Note that much of the personal information relating to California residents that flows through the Service is Customer Data, for which the relevant Customer is responsible; we will direct such requests accordingly.

15. Your Privacy Rights (Other U.S. States)

Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, and others) may have similar rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling. Because we do not sell personal information or use it for targeted advertising, those opt-outs generally do not apply, but you may exercise your other rights by emailing support@pushpulse.com.

16. Do Not Track and Global Privacy Control

Some browsers offer "Do Not Track" (DNT) signals. Because there is no common industry standard for DNT, our website does not currently respond to DNT signals. Where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC).

17. Marketing Communications

If you receive marketing emails from us, you can opt out at any time using the unsubscribe link in the email or by emailing support@pushpulse.com. We will still send you transactional and account-related messages, such as billing and service notices.

18. Links to Other Sites

The Service may contain links to websites and services we do not operate. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last Revised" date and, for material changes, provide additional notice (such as by email or a prominent notice in the Service). Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

20. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

PushPulse, Inc. Email: support@pushpulse.com