Privacy Policy

1. Introduction

PartnerPulse ("we", "us", or "our") operates a partner relationship management platform that enables B2B SaaS companies to recruit, manage, and compensate channel partners. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access or use our platform at partnerpulse.com and any related services, including the partner portal and public API (collectively, the "Service").

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Service immediately.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

3.1 Account Data

When you register for an account, we collect your full name, email address, company name, and optionally your website URL and profile image. If you register as a vendor, we also collect billing details and organization information.

3.2 Partner Data

When you participate in a partner program, we collect and process data related to your deals, commissions, payout history, referral tracking activity, tier status, and program enrollments. This data is necessary to provide the core functionality of the Service.

3.3 Technical Data

We automatically collect certain technical information when you use the Service, including your IP address, browser type and version, device type, operating system, referring URLs, and general geolocation data (country and city level). This data is collected through server logs and cookies.

3.4 Usage Data

We collect information about how you interact with the Service, including pages viewed, features used, course progress within the Partner Academy, quiz attempts, certification completions, and the dates and times of your activity.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• Provide and operate the Service — including managing your account, processing partner applications, and facilitating deal tracking.
• Process commissions and payouts — calculating earned commissions, generating payout records, and facilitating payments via Stripe.
• Improve the platform — analyzing usage patterns to identify bugs, optimize performance, and develop new features.
• Send notifications — delivering transactional emails such as application approvals, payout confirmations, and system announcements.
• Ensure security — detecting fraud, monitoring for suspicious activity, and enforcing our Terms of Service.

5. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contract performance — processing is necessary to fulfill our contractual obligations to you, including operating your account and processing commissions.
• Legitimate interests — we have a legitimate interest in improving the Service, preventing fraud, and ensuring platform security, provided these interests are not overridden by your rights.
• Consent — where required, we obtain your consent before processing data for marketing communications and non-essential tracking cookies. You may withdraw consent at any time.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law:

7. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data, subject to legal retention requirements.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to restriction — request that we limit processing of your data in certain circumstances.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@partnerpulse.io or use the data export and deletion tools available in your account settings. We will respond to your request within 30 days.

8. Cookies

We use cookies and similar technologies to operate and improve the Service:

• Essential cookies — required for authentication, session management, and security. These cannot be disabled.
• Tracking cookies — used to attribute partner referrals and track link clicks. These are set based on your consent preference.
• Analytics cookies — help us understand how users interact with the platform so we can improve the experience. These are set based on your consent preference.

You can manage your cookie preferences at any time using the cookie consent banner or through your browser settings.

9. Third-Party Services

We use the following third-party services to operate the platform. Each service processes data in accordance with its own privacy policy:

• Neon (Database) — stores application data. Privacy Policy
• Stripe (Payments) — processes commission payouts and vendor billing. Privacy Policy
• Resend (Email) — delivers transactional and notification emails. Privacy Policy
• HubSpot (CRM) — synchronizes deal and contact data when enabled by the vendor. Privacy Policy

10. International Data Transfers

Your personal data may be processed in the United States and the European Union. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of all data in transit using TLS 1.2+
• Passwords hashed with bcrypt using industry-standard salt rounds
• Role-based access controls for all platform functions
• Regular security reviews and dependency audits
• Database access restricted to authorized services with encrypted connections

12. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such information promptly. If you believe a child under 16 has provided us with personal data, please contact us at info@partnerpulse.io.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify registered users via email or an in-app notification.

We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us: