Privacy Policy

1. Overview

Exolv Pulse ("Pulse") is a staff management application operated by Exolv LLC ("we", "us", "our"). This policy describes what information we collect, how we use it, and the choices available to you. It applies to business owners and managers who use Pulse ("customers") and to the staff data that customers enter into the Service.

2. Roles: who controls the data

For the account information of the business owner or manager who signs up, we act as the controller of that information. For the employee and operational data that a customer enters into Pulse — such as staff names, attendance, performance, and notes — the customer is the controller of that data, and we act as a processor handling it on the customer's behalf and instructions. Customers are responsible for having a lawful basis to collect and use their staff's information and for informing their staff as required by law.

3. Information we collect

Account information you provide when signing up, such as your name, business name, email address, and billing details (payment card details are handled by our payment processor, not stored by us).

Data you enter about your team, which may include staff names, roles, contact details, photographs, attendance and clock-in records, location data captured at clock-in (where enabled), performance entries, notes, pay and bonus information, and tasks.

Usage and technical information, such as log data, device and browser information, and basic analytics used to operate and improve the Service.

4. How we use information

• To provide, operate, maintain, and secure the Service;
• To process subscriptions and payments;
• To provide customer support and respond to enquiries;
• To improve and develop features and reliability;
• To send service-related communications;
• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use the staff data you enter for advertising.

5. Clock-in photos and location

Where a customer enables photo or location verification for clock-in, the Service may capture a photograph and approximate location at the moment of clock-in for attendance-verification purposes. This information is stored as part of the customer's attendance records. Customers are responsible for ensuring they have informed their staff and obtained any consent required by law before enabling these features.

6. How information is stored

Pulse is built on trusted third-party infrastructure, including Supabase for database, authentication, and file storage, and a payment processor for handling payments. These providers process data on our behalf under their own security and privacy commitments. We take reasonable technical and organisational measures to protect information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Sharing of information

We share information only as needed to operate the Service: with infrastructure and payment providers acting on our behalf; where required by law or to respond to lawful requests; and to protect the rights, safety, and property of Exolv LLC, our users, or others. If our business is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

8. Data retention

We retain account and customer data for as long as an account is active and as needed to provide the Service. After an account is closed, we may retain data for a limited period to comply with legal obligations, resolve disputes, and enforce our agreements, after which it may be deleted. Customers can request deletion of their data as described below.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, export, or delete personal information, or to object to or restrict certain processing. Business owners can manage much of their data directly within the Service. For requests relating to account data, or to ask us to delete data after account closure, contact us at connect@exolv.net. Where a request concerns staff data that a customer controls, we will refer the request to that customer or act on their instructions.

10. Children

The Service is intended for use by businesses and is not directed to children. We do not knowingly collect personal information directly from children through the account-holder relationship.

11. International use

We operate from the Republic of Trinidad and Tobago, and information may be processed and stored on infrastructure located in other countries. By using the Service, you understand that information may be transferred to and processed in locations outside your own country.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above and make the current version available. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

For any questions or requests about this Privacy Policy or your information, contact us at connect@exolv.net.