PULSE — Privacy Policy
Last updated: 16 October 2026
This notice covers the PULSE pre-launch waitlist, not the future app’s full event-discovery or ticketing services.
Scope
PULSE is an upcoming event-discovery and ticketing application. This website offers project information and a free waitlist for beta access and launch announcements. You do not need a PULSE account or password to join. Joining does not guarantee access on a particular date.
Who is responsible
Abhinav Muthuraman operates PULSE as an individual and is the controller of the waitlist information described here. Contact: abhinav.muthuraman@gmail.com. Postal address: Leerkens 15, 2600 Berchem, Antwerpen, Belgium.
Information we process
We process your email address; an optional first name where an interface offers it; signup source and an optional campaign label; waitlist status; a random record identifier; and creation and last-update timestamps. We also record your affirmative consent, its timestamp, wording, version and purpose, and withdrawal information where applicable. Source and campaign labels come from links or signup interfaces and do not verify anyone’s identity or Instagram account. The current waitlist does not ask for payment details, GPS location, passwords, Instagram usernames or followers. This statement does not describe what a future version of the app may process.
Purposes and legal bases
We rely on your consent under Article 6(1)(a) GDPR to register your interest and send the requested PULSE beta-access, launch and occasional development updates. An optional first name personalizes those communications. Consent does not extend to unrelated maduvu marketing. We rely on legitimate interests under Article 6(1)(f) for proportionate abuse prevention and technical security, and for limited signup-source/campaign evaluation. These interests are protecting availability and understanding which signup links are useful. We limit this evaluation to the signup labels, without building social profiles; you may object. A documented balancing assessment accompanies this implementation.
Abuse prevention
The signup service uses a honeypot and a limit of five qualifying attempts per IP-derived fingerprint in ten minutes. It hashes a request IP address with a server-side secret. The function does not store the raw IP in the waitlist tables. The resulting fingerprint is pseudonymous, not anonymous. Providers may separately process request IP addresses, technical metadata and infrastructure logs. The ten-minute counting window is not a deletion period.
Providers
Framer hosts the website and provides related services. Supabase provides the waitlist database and backend. The primary Supabase database is in eu-west-1, Ireland. These services may use subprocessors. No email-delivery provider has been selected for this waitlist, and this signup function does not send welcome, verification or campaign emails. Before introducing delivery, we will assess the provider, processing terms, unsubscribe support and this notice.
International processing
An EU database location does not mean all processing stays in the EEA. Operational metadata, support, telemetry or other provider processing may occur elsewhere. Supabase describes Standard Contractual Clauses in its Data Processing Addendum for relevant international transfers. Framer also publishes processing terms and transfer safeguards. Information about their processing terms and transfer safeguards is available in the provider references below. You may request information about applicable safeguards by email.
Retention
Our intended subscription limit is no later than six months after PULSE publicly launches, unless earlier deletion is required or a separate lawful basis applies. No public launch date has been set; launch-based deletion will only be activated after that date is established and approved. Until then, we review whether continuing to hold the pre-launch list is necessary, and you can request withdrawal or deletion now. A separate cleanup mechanism identifies rate-limit fingerprints older than 24 hours; an hourly cleanup removes these expired fingerprints, normally within one additional hour. Withdrawal records and related subscription information are retained for up to 24 months after withdrawal for accountability and handling legal claims, unless earlier erasure is appropriate. Any exceptional legal hold must have a documented reason and expiry. Exports must follow the same deletion decisions. Backups and provider logs have separate lifecycles; exact account retention is still being verified. Deleted entries must not be reintroduced from an export or restored backup.
Security
Access to subscriber and consent records is restricted. Ordinary anonymous and signed-in clients cannot directly read or edit the waitlist tables; submissions pass through the server-side signup function. Privileged credentials remain on the backend. We use proportionate access and abuse controls, but no online system can guarantee absolute security.
Your rights
Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction or portability of your information; object to legitimate-interest processing; and withdraw consent. Withdrawal does not affect processing already lawfully carried out. Email abhinav.muthuraman@gmail.com. We may take proportionate steps to verify a request and normally respond within one month. Where a lawful extension is necessary, we will explain it within the initial period. You can complain to the Belgian Data Protection Authority or another competent supervisory authority.
Withdrawal and email ownership
To leave the waitlist, email abhinav.muthuraman@gmail.com with the address you registered and ask to withdraw. No account login or explanation is required. The operator processes verified requests administratively and stops the relevant communications; identity checks are proportionate. There are currently no automated unsubscribe links or email ownership confirmation. This is not double opt-in. An unverified public signup cannot reverse a recorded withdrawal. Before campaign emails begin, a straightforward unsubscribe mechanism and appropriate ownership-verification process must be in place. Historical records without reliable evidence are held for review, not automatically treated as consented marketing subscribers.
Website analytics and cookies
A live inspection of this PULSE page found Framer’s analytics script and a Framer editor integration. Framer describes its built-in analytics as cookie-free. No Google Analytics or advertising pixel was identified in that observed page state, but this is not a complete audit of site settings, all routes or provider logs. The app’s current waitlist analytics helper only logs development events and does not send the submitted email to an external analytics service. Any non-essential tracking added later requires an assessment and, where necessary, prior consent.
Changes
We will update this notice when the waitlist’s purposes, providers or practices materially change. Where a change requires fresh consent, updating a page alone will not replace that consent. The date above identifies the latest published update.
Contact and references
For privacy questions or requests, contact Abhinav Muthuraman at abhinav.muthuraman@gmail.com. Belgian Data Protection Authority: https://www.gegevensbeschermingsautoriteit.be/. Provider information: https://supabase.com/legal/privacy-resources/data-residency-and-transfers-faq and https://www.framer.com/legal/data-processing-addendum.