PulseStack™ is a trading name of AI Programs Holdings Ltd, a company registered in England and Wales (company number 17516543), registered office 128 City Road, London, EC1V 2NX. AI Programs Holdings Ltd is the data controller for personal data processed through pulsestack.co.uk. We are registered with the Information Commissioner's Office (ICO) under registration number ZC280525. We believe transparency about data handling builds trust, which is why we've created this straightforward privacy policy.
This policy governs all interactions with our monitoring services, whether you're using our website, your dashboard or our alerts. For enterprise clients requiring specific data processing agreements, we provide GDPR-compliant contracts upon request.
We collect only the information necessary to deliver reliable monitoring services and improve your experience. Data collection happens through two primary channels: information you directly provide and data we automatically capture during service operation.
Account Registration Details: When establishing your PulseStack™ account, we require essential identifiers including your full name, email address, and secure password. This minimal dataset enables account creation and service access.
Payment and Subscription Data: Upgrading to premium monitoring plans requires additional information such as billing addresses, payment card details, and transaction records. This data facilitates payment processing and subscription management.
Service Credentials: Depending on your monitoring requirements, you may provide server access credentials (such as SSH access for server diagnostics) enabling our systems to perform comprehensive health checks on your infrastructure.
Support Communications: Customer service interactions, survey responses, and feedback submissions help us understand user needs and resolve technical issues effectively.
When you use the site, our servers record technical information: your IP address, your browser, the page you asked for and when. We use it to run the service, keep it secure (for example, to limit and block abuse) and fix problems.
Cookies: We use essential cookies to keep you signed in, protect the sign-in forms and remember your cookie choices. We use analytics and marketing cookies only if you allow them in our cookie banner, and nothing in those groups loads before you choose. Our cookie policy lists every cookie, and you can change your choice at any time from "Cookie settings" at the bottom of every page. These tools never run in our admin pages or on the status pages our customers publish on PulseStack™.
Visit statistics, without cookies: our own visit counter records the pages you view on our website (not your dashboard, our admin pages or the status pages our customers publish), the website that sent you here and the page on it that linked to us (without anything after a question mark in its address, such as search terms), any campaign tags in the link, the town your IP address points to (looked up on our own server), your type of device, browser and operating system, how long each page was on screen, how far down it you scrolled, and how quickly pages loaded. If you use one of our free tools or make an account during the same visit, the statistics are linked to it. To tell visits apart we use an anonymous code made from your IP address and browser details mixed with a random value that we replace every day, so the code changes every day and we do not keep your IP address for this. It uses no cookies and stores nothing on your device. The legal basis is our legitimate interest in understanding and improving the site; we do not use these statistics to identify you or to contact you, and you can object at any time.
Analytics, only with your consent: we use Google Analytics, Microsoft Clarity and HubSpot to see which pages are used and how, so we can improve the site and your dashboard. Microsoft Clarity records your visits as session recordings and heatmaps (clicks, taps, scrolling and the pages you view), with anything you type hidden. If you are signed in, our analytics tools are also given your account's user number, never your name or email address, so your visits on different devices count as one person. The legal basis is your consent, which you can withdraw at any time.
Affiliate links: if you follow a link from one of our affiliates, we remember which affiliate sent you for 90 days, so they can be paid their share if you become a customer. We use it for nothing else.
We process your data for specific, legitimate business purposes that directly benefit your monitoring experience:
Data retention periods align with business necessity and legal requirements, ensuring we maintain information only as long as needed for stated purposes.
PulseStack™ implements strict controls around data sharing, limiting access to essential business operations and legal requirements.
We may share information with trusted service providers who assist with payment processing (Stripe), our customer database, newsletter and live chat (HubSpot, described below), email delivery and technical infrastructure. These partners operate under contractual obligations to protect your data according to our privacy standards. Google (Google LLC), through Google Drive, stores encrypted copies of our backups off-site for 30 days. They are encrypted on our server before they are sent, with a key that only we hold, so Google cannot read them. Only with your consent, we also use the analytics and advertising platforms described in this policy and listed in our cookie policy.
Legal compliance may require disclosure to government authorities, courts, or regulatory bodies when mandated by valid legal processes. We evaluate all such requests carefully and provide only the minimum information required.
Business transactions such as mergers or acquisitions could involve data transfer, but any successor organisation would remain bound by this privacy policy's commitments.
If you have a PulseStack™ account: we copy your name, email address, plan, trial and subscription status and sign-up date into HubSpot, so we can look after your account and see how trials and subscriptions are going. The legal basis is our contract with you and our legitimate interest in running our business. This does not sign you up to our newsletter.
Our newsletter: if you sign up for the PulseStack™ newsletter with the sign-up at the foot of our pages, which does nothing else, we keep your email address, the page you signed up on, and a record of your consent (the words shown with the sign-up, and when you signed up). We only send the newsletter to people who have signed up for it. Every email has an unsubscribe link, and you can unsubscribe at any time. If you unsubscribe, we keep only your email address and the date you unsubscribed, so we never email you again. The legal basis is your consent.
HubSpot's tracking code: only if you allow analytics cookies in our cookie banner, HubSpot's tracking code counts the pages you visit and, once you have given us your email address (for example by signing up or joining the newsletter), links those visits to your record. Its cookies are listed in our cookie policy. Without your consent it does not load, and it never runs in our admin pages or on our customers' status pages.
Live chat (in HubSpot): if you use the chat button in the corner of our pages, we keep what you and we write, the address of the page you started the chat on, the browser and device you used and, if you give them, your name and email address. Until you press the chat button, nothing about you goes to HubSpot through the chat. We use this to answer you in the chat, and by email if you leave your address there. The legal basis is our legitimate interest in answering your questions. The chat also asks you to agree before it starts, and links to this policy. It sets only the cookies it needs to work, listed in our cookie policy, and no analytics cookies. We keep your chats with your other details in HubSpot, for the periods under How Long We Keep Your Data.
You can read HubSpot's privacy policy.
PulseStack™ checks your sites from London, New York and Sydney and alerts you on eight native channels. The free plan covers 5 monitors.
We advertise PulseStack™ online and use Google Ads and Meta Pixel to measure our adverts. We only load these tags if you allow marketing cookies in our cookie banner, and nothing is loaded before you choose. The legal basis is your consent, which you can withdraw at any time from "Cookie settings".
If you allow marketing cookies and then start a free trial or buy a plan or add-on, we tell the ad platform about it so it can work out which adverts work. To do this we keep, with your account, your cookie choice and the identifier of the advert you clicked to reach us (only with marketing consent), and report trials and purchases for up to 90 days after them.
Google: we use enhanced conversions. When you sign up, start a trial, buy a plan or add-on or send us a message, Google's tag in your browser is given your email address and scrambles it (hashing it with the SHA-256 algorithm, so it cannot be read) before sending it, so Google can match it to a click on one of our adverts. If you came from a Google advert, we also list your trial or purchase (its reference, value and time) with that advert's click identifier (Google calls it a gclid), never your name or contact details, in a password-protected file that Google Ads collects from us each day through Google Ads Data Manager, for 90 days after it (offline conversion import).
Google signals: with marketing cookies allowed, Google Analytics also uses Google signals. For visitors signed in to a Google account who have turned on personalised adverts, Google adds age range, gender and interests to our reports, only ever as totals for groups of people, and links their visits from different devices. We never see who they are. You can turn this off for every website in Google's My Ad Center.
Meta: we use advanced matching: at the same moments, the Meta Pixel in your browser is given your email address and name, already scrambled in the same way. Our server also reports a trial or purchase to Meta (its Conversions API) with your email address and name hashed in the same way, your IP address and browser details, and Meta's own cookie identifiers, so it is counted once even if your browser blocks the Pixel.
Without marketing cookies, none of this happens, and we keep no click identifier. With marketing cookies allowed, the ad platforms may also add you to our lists of website visitors (remarketing), so our adverts can be shown to you on other websites and apps; you can stop this at any time from "Cookie settings". We do not upload lists of our customers to any ad platform (such as Google Customer Match or Meta Custom Audiences).
These platforms use this information under their own terms, in some cases as separate controllers. You can read how Google uses information from sites that use its services, and manage the adverts Google shows you in Google's My Ad Center.
We keep personal data only for as long as we need it for the reasons in this policy, then delete it.
Protecting your information requires comprehensive security measures across technical, administrative, and physical domains.
Technical safeguards include:
Administrative protocols ensure staff receive privacy training, follow data handling procedures, and maintain appropriate access levels based on job responsibilities.
While we implement industry-standard protections, no system offers absolute security. We continuously monitor and improve our security posture whilst being transparent about potential risks inherent in digital services.
You maintain significant control over personal information within our platform, with rights that vary based on your jurisdiction:
Exercise these rights through your account dashboard or by contacting our privacy team at privacy@pulsestack.co.uk.
Status page subscribers: If you subscribe to email updates on a status page hosted on PulseStack™, we keep your email address, the page you subscribed to, and when you signed up, confirmed and were last emailed. We use it only to email you about incidents and planned maintenance on that page, for the business that runs it. Nothing is sent until you confirm with the link in our confirmation email, every email has an unsubscribe link that deletes your address straight away, and sign-ups that are never confirmed are deleted after 7 days. The business that runs the page can see and remove its subscribers. The emails are sent through our email provider, Resend.
Questions about this privacy policy or our data practices should be directed to our privacy team at privacy@pulsestack.co.uk. We respond to inquiries promptly and work to resolve any concerns about information handling.
This privacy policy updates periodically to reflect service changes, legal developments, and evolving privacy practices. Significant modifications will be communicated through email notifications and platform announcements, with continued service usage indicating acceptance of updated terms.
Last updated 26 October 2026.
Start monitoring in minutes. Free plan included, no credit card needed.
Get started free