Privacy Policy

Happy Technologies LLC ("we," "us," or "our") operates PulsePlus, an enterprise gamification platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Effective Date: November 2025

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application. By using PulsePlus, you consent to the practices described in this policy.

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account (name, email, company, role)
• Use our services (achievements, objectives, progress)
• Contact us for support (email, phone, company)
• Submit a contact form (via HubSpot)
• Subscribe to our newsletter or marketing communications

This information may include:

• Name and email address
• Company name and role/title
• Phone number (optional)
• Profile information and preferences
• User-generated content (achievements, progress, team interactions)
• Payment information (processed by third-party payment processors)

Automatically Collected Information

When you access PulsePlus, we may automatically collect certain information, including:

• Log data: IP address, browser type, pages visited, time/date stamps
• Device information: Operating system, device identifiers, screen resolution
• Usage data: Features used, time spent, interactions, click patterns
• Cookies: We use cookies and similar tracking technologies (see Cookie Policy section)
• Analytics data: Cloudflare Web Analytics collects anonymized usage statistics on the marketing site only (privacy-first, no cookies, no personal data)

Note: This section describes data collection specifically for the PulsePlus Application (app.pulseplus.dev). The marketing website (pulseplus.dev) collects minimal data as described in other sections.

Data Collected by the Application

When you use the PulsePlus application (not the marketing website), we collect additional information necessary for the gamification platform:

• Profile Information: Name, email address, avatar, rank, level, XP
• Progress & Gamification: Objectives completed, achievements earned, quest progress, inventory items, boosts
• Team & Social: Team membership, friends list, team contributions
• Communication: Chat messages, activity feed posts (shared with your team/organization)
• Learning: Lesson progress, scores, learning path enrollment
• Activity: Login timestamps, daily streaks, activity logs (for XP calculation)

What We DON'T Collect in the Application

Third-Party Services (Application Only)

Your Data Rights in the Application

The PulsePlus application provides built-in privacy tools to give you complete control over your data:

• Export Your Data: Download all your personal data in JSON format (GDPR Article 20 / CCPA Section 1798.110 compliant)
• Delete Your Account: Permanently delete your account and all associated data with built-in safeguards (GDPR Article 17 / CCPA Section 1798.105 compliant)
• View Data Collected: See exactly what data we store about you with complete transparency
• Privacy Dashboard: Access all privacy controls from a centralized dashboard

Access Privacy Tools: Log in to the application and visit Privacy Settings to manage your data. For detailed information, view the in-app Privacy Policy.

We use the information we collect to:

• Provide our service: Create your account, store your data, enable gamification features
• Process transactions: Handle subscriptions and billing (via third-party payment processors)
• Communicate with you: Send technical notices, updates, security alerts, and support messages
• Customer support: Respond to your questions and requests
• Improve our service: Monitor usage trends, analyze features, fix bugs
• Security: Detect, prevent, and address technical issues, fraud, and security threats
• Personalization: Customize your experience and deliver relevant content
• Marketing: Send you promotional communications (only with your opt-in consent)

We do NOT use your data to train AI models without explicit permission. We do NOT sell your data to third parties.

We do NOT sell your personal information to anyone. Period.

We may share your information only in the following limited circumstances:

• With Your Consent: When you explicitly direct us to share information with third parties
• Service Providers (See Third-Party Services section below): With trusted vendors who perform services on our behalf under strict data protection agreements
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you'll be notified and can opt out)
• Legal Requirements: When required by law, court order, or to protect our rights, safety, and property
• Within Your Organization: With administrators and team members in your organization as part of the service functionality
• Anonymized Data: We may share aggregated, anonymized data (no personal identifiers) for research or analytics

PulsePlus uses the following third-party services. Each has their own privacy policy and data practices:

Important: We carefully vet all third-party services and only work with companies that maintain strong data protection standards. We have data processing agreements in place where required.

We implement industry-standard technical and organizational measures to protect your personal information:

• Encryption in transit: All data transmitted uses HTTPS/TLS encryption
• Encryption at rest: All data stored in Firebase is encrypted at rest
• Access controls: Role-based access, multi-factor authentication for admins
• Secure infrastructure: Firebase/Google Cloud Platform (SOC 2, ISO 27001 certified)
• Regular backups: 30-day backup retention for disaster recovery
• Security monitoring: Automated threat detection and logging
• Vulnerability scanning: Regular security assessments

However, no method of transmission over the internet is 100% secure. While we strive to protect your information using commercially reasonable means, we cannot guarantee absolute security.

If you discover a security vulnerability, please report it to security@happy-tech.biz. We take all reports seriously and will respond within 48 hours.

We retain your personal information only as long as necessary to:

• Provide our services to you
• Comply with legal obligations (tax records, audit trails)
• Resolve disputes and enforce agreements
• Maintain backup copies for disaster recovery (30 days)

When You Delete Your Account

When you request account deletion, we will:

• Immediately: Disable your account access
• Within 30 days: Delete or anonymize all your personal information from our active systems
• Backup retention: Backups may retain data for up to 30 additional days (then automatically purged)
• Legal retention: We may retain minimal information if required by law (e.g., financial records for 7 years)

How to Delete Your Data

You can request data deletion by:

• Using the account deletion feature in your PulsePlus dashboard
• Emailing us at privacy@happy-tech.biz with "Delete My Account" in the subject line

We'll confirm deletion within 48 hours and complete the process within 30 days.

Depending on your location, you may have the following rights regarding your personal information:

All Users (Worldwide)

• Access: Request a copy of all personal information we have about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your information (30-day compliance)
• Portability: Request a copy of your data in CSV or JSON format
• Opt-Out of Marketing: Unsubscribe from promotional emails anytime

California Residents (CCPA Rights)

If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale: We don't sell your data, but you can verify this anytime
• Right to Non-Discrimination: We won't discriminate against you for exercising your rights

To exercise your CCPA rights, email privacy@happy-tech.biz or visit our CCPA Opt-Out page.

EU/UK Residents (GDPR Rights)

If you're in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Confirm whether we process your data and obtain a copy
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restriction of Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@happy-tech.biz. We'll respond within 30 days (or as required by law).

We use cookies and similar tracking technologies to:

• Remember your preferences and settings (essential cookies)
• Understand how you use our services (Cloudflare Web Analytics on marketing site only - no cookies, no personal data tracking)
• Improve our services and user experience
• Provide personalized content

Types of Cookies We Use

Managing Cookies

You can control cookies through:

• Our Cookie Banner: Accept or reject non-essential cookies when you first visit
• Cookie Settings: Change your preferences anytime via the footer link
• Browser Settings: Most browsers allow you to block all cookies (may limit functionality)
• No Analytics Opt-Out Needed: Since we use Cloudflare Web Analytics (which doesn't use cookies or track individuals), there's no need to opt out

Note: Disabling cookies may limit your ability to use certain features of our service.

PulsePlus is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@happy-tech.biz.

We will delete such information from our systems within 30 days of verification.

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

Server Location: PulsePlus is hosted on Google Firebase in the United States (us-east1 region).

If you are located outside the United States and choose to provide information to us, please note that we transfer your data to the United States and process it there.

By using PulsePlus, you consent to the transfer of your information to the United States. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable law (Standard Contractual Clauses for EU/UK transfers).

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending you an email notification (for material changes)
• Displaying a notification on the website for 30 days

Material changes will take effect 30 days after notice. Your continued use of PulsePlus after any changes indicates your acceptance of the updated Privacy Policy.

We'll maintain a changelog of all material changes to this Privacy Policy at /privacy/changelog (coming soon).

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Response Time: We respond to all privacy inquiries within 48 hours and resolve requests within 30 days (or as required by law).