2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: Processing proxy requests, routing traffic through the network, and managing your account.
- Billing & Payments: Calculating usage-based charges, processing payments, and distributing node operator earnings.
- Network Optimization: Improving routing algorithms, load balancing, and overall network performance.
- Security: Detecting and preventing fraud, abuse, unauthorized access, and violations of our acceptable use policy.
- Communications: Sending transactional emails (billing receipts, usage alerts), service announcements, and, with your consent, marketing communications.
- Legal Compliance: Meeting regulatory obligations, responding to legal requests, and enforcing our terms of service.
3. Data Sharing
We do not sell your personal information. We may share data in the following circumstances:
- Service Providers: We work with third-party providers for payment processing (Stripe), cloud infrastructure (AWS, Hetzner), email delivery (Resend), and analytics. These providers only access data necessary to perform their services.
- Node Operators: Proxy traffic is routed through node operators. Operators can see aggregate bandwidth metrics but cannot access the content of your requests due to end-to-end encryption.
- Blockchain: Settlement transactions are recorded on the Solana blockchain. Wallet addresses and payment amounts are publicly visible on-chain.
- Legal Requirements: We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity.
4. Cookies & Tracking
We use cookies and similar technologies for the following purposes:
- Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website. We use privacy-focused analytics that do not track users across sites.
- Preference Cookies: Store your settings such as theme preferences, dashboard layout, and notification preferences.
We do not use third-party advertising cookies or cross-site tracking. You can manage cookie preferences through your browser settings.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide services:
- Account Data: Retained until you delete your account, plus 30 days for backup recovery.
- Usage Logs: Retained for 90 days for billing verification, then aggregated and anonymized.
- Node Metrics: Retained for 12 months for performance scoring and dispute resolution.
- Payment Records: Retained for 7 years as required by financial regulations.
- Support Communications: Retained for 2 years after resolution.
After account deletion, we remove or anonymize your personal data within 30 days, except where retention is required by law.
6. Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted using TLS 1.3.
- Passwords are hashed using bcrypt with a minimum cost factor of 12.
- API keys are stored as salted hashes; we never store plaintext keys.
- Access to production systems is restricted via role-based access controls and multi-factor authentication.
- We conduct regular security audits and maintain a responsible disclosure program.
- Proxy traffic is encrypted end-to-end between clients and target servers; node operators cannot inspect request content.
While we take every reasonable precaution, no method of transmission or storage is completely secure. If you discover a vulnerability, please report it to security@pulsenet.io.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data. We will comply unless retention is required by law.
- Portability: Request your data in a structured, machine-readable format (JSON export available in dashboard settings).
- Restriction: Request that we limit processing of your data in certain circumstances.
- Objection: Object to processing of your data for direct marketing purposes.
- Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@pulsenet.io or use the data management tools in your account settings. We will respond within 30 days.
8. Children's Privacy
PulseNet services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly delete their account and associated data. If you believe a child has provided us with personal information, please contact us at privacy@pulsenet.io.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Post the updated policy on this page with a revised "Last Updated" date.
- Notify registered users via email at least 14 days before changes take effect.
- Provide a summary of changes at the top of the updated policy.
Your continued use of PulseNet after changes become effective constitutes acceptance of the revised policy.