1. Introduction
MarketPulse ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Information you provide:
- Account information: name, email address, business name, brand color preference
- Recipient lists: names and email addresses of your clients (stored for report delivery)
- ZIP codes you configure for market tracking
- Payment information: processed by Stripe — we do not store credit card numbers
Information collected automatically:
- IP address and approximate geolocation
- Browser type, operating system, and device information
- Usage data: pages visited, features used, report generation activity
- Cookies and similar tracking technologies (see our Cookie Policy)
3. How We Use Your Information
- Provide, maintain, and improve the Service
- Generate and deliver AI-powered market reports
- Process payments and manage subscriptions via Stripe
- Send transactional emails (reports, receipts, account notifications) via Resend
- Generate AI content using Anthropic Claude (market data and preferences are sent to the AI model)
- Respond to support requests
- Analyze usage patterns to improve features (aggregated and anonymized)
- Comply with legal obligations
4. Third-Party Services
We share data with the following service providers, each under their own privacy policies:
- Supabase — Authentication and database hosting
- Stripe — Payment processing (PCI-DSS compliant)
- Anthropic (Claude) — AI report generation (market data sent for processing)
- Resend — Email delivery
- Redfin / RentCast — Market data sources
- Vercel — Application hosting
We do not sell your personal information to third parties. We do not share your data for advertising purposes.
5. Data Retention
We retain your account data for as long as your account is active. Generated reports are retained indefinitely unless you request deletion. Upon account deletion, personal data is removed within 30 days, except where retention is required by law (e.g., payment records for tax compliance, retained for 7 years).
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Right to Access — Request a copy of the personal data we hold about you
- Right to Correction — Request correction of inaccurate data
- Right to Deletion — Request deletion of your personal data
- Right to Portability — Request your data in a machine-readable format
- Right to Opt-Out — Opt out of data sale or sharing (note: we do not sell data)
- Right to Non-Discrimination — We will not penalize you for exercising your rights
To exercise any of these rights, email us at privacy@marketpulse.ai. We will respond within 45 days as required by law.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and its amendments (CPRA):
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of the sale or sharing of personal information
- Right to correct inaccurate personal information
- Right to limit use of sensitive personal information
We do not sell or share your personal information as defined by the CCPA. We do not process sensitive personal information beyond what is necessary for the Service.
8. Data Security
We implement industry-standard security measures including encryption in transit (TLS/SSL), encrypted database storage, secure authentication via Supabase, and PCI-DSS-compliant payment processing via Stripe. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
10. International Users and GDPR
The Service is hosted in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the United States.
European Economic Area (EEA), United Kingdom, and Switzerland: If you are located in these regions, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent local laws:
- Legal Basis for Processing — We process your data based on: (a) your consent, (b) performance of a contract (providing the Service), (c) compliance with legal obligations, and (d) our legitimate interests (improving the Service, fraud prevention)
- Right to Restrict Processing — Request that we limit how we use your data
- Right to Object — Object to processing based on our legitimate interests
- Right to Lodge a Complaint — You may file a complaint with your local data protection authority (e.g., the ICO in the UK, CNIL in France, BfDI in Germany)
- Data Transfers — Data transferred outside the EEA/UK relies on Standard Contractual Clauses (SCCs) as approved by the European Commission
Canada: Your rights under PIPEDA are respected. You may withdraw consent to data processing at any time by contacting us.
Australia: We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988. You may access and correct your personal information by contacting us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The "Last updated" date at the top indicates the most recent revision.