R
RedditPulse

Privacy Policy

Last updated: April 18, 2026

1. Who we are

Reddit Pulse (“we”, “our”, “us”) operates the RedditPulse software-as-a-service platform at www.redditpulse.xyz. We act as the data controller for the personal data described in this Policy. Our address is 1B, Jalalia Apartment, Sylhet, Bangladesh. For any privacy-related request, contact ohm.sust2@gmail.com.

2. Personal data we collect

From you, when you create an account or use the Service

  • Identity and contact: name, email address, profile image (provided via Clerk authentication).
  • Account configuration: project names, product descriptions, monitored keywords, subreddits, competitors, strategy preferences, notification destinations (Slack webhook URL, email, custom webhook URL), direct-message templates.
  • Billing data: handled by Dodo Payments (Merchant of Record). We receive transaction metadata (plan, amount, status, last 4 digits) but do not store full payment-card numbers.
  • Reddit credentials (optional): if you authorise the Service to send direct messages on your behalf, we store the credentials or OAuth tokens needed for that purpose.

From Reddit and other public sources

  • Public Reddit posts and comments matching your monitored keywords, including author username, title, body, score, subreddit, and timestamp.
  • Public Google Search results from Serper.dev for SEO opportunity detection (Reddit URLs ranking for your keywords).

Automatically

  • Technical data: IP address, browser type, device, pages viewed, request timestamps, error logs.
  • Cookies: strictly necessary cookies set by Clerk for authentication and session management. We do not currently set advertising or third-party tracking cookies.

3. Why we use personal data and our legal bases

  • Provide the Service— create your account, run scans, score leads, send notifications, deliver direct messages you approve. Legal basis: performance of contract.
  • Process payments— subscription billing via Dodo Payments. Legal basis: performance of contract.
  • Operate, secure, and improve the Service— rate limits, abuse prevention, error monitoring, capacity planning. Legal basis: legitimate interest in running a secure, reliable service.
  • Service communications— transactional emails, digests you opted into, security alerts. Legal basis: performance of contract or legitimate interest.
  • Compliance— respond to lawful requests, enforce our Terms, prevent fraud. Legal basis: legal obligation or legitimate interest.

4. How long we keep personal data

  • Account and project data: for the life of your account, plus up to 30 days after deletion to allow recovery.
  • Billing records: retained as required by tax and accounting law.
  • Lead and scan data: retained while your account is active; you may delete individual leads at any time from the dashboard.
  • Application logs: typically 30 days, longer if needed for security investigations.

5. Sub-processors

We share personal data with the following sub-processors, each of whom is contractually bound to protect that data and use it only to deliver the Service to us:

  • Supabase(USA) — database and storage.
  • Clerk(USA) — authentication and session management.
  • OpenRouter(USA) — AI model gateway for scoring, replies, and website analysis.
  • Resend(USA) — transactional email delivery.
  • Dodo Payments(Merchant of Record) — subscription billing and tax handling.
  • Hetzner Cloud(Germany) — hosting for the background worker (Frankfurt/Nuremberg/Helsinki region).
  • Vercel(USA) — web application hosting and edge delivery.
  • Serper.dev(USA) — Google SERP data for SEO opportunity detection.
  • Reddit(USA) — source platform for monitored content; recipient of direct messages you approve.

We will update this list when sub-processors change. Continued use of the Service after changes are posted constitutes notice of those changes.

6. International transfers

Our infrastructure spans Bangladesh, the European Union, and the United States. Personal data of EU/UK residents is transferred to non-adequate countries (including the USA) under Standard Contractual Clauses or equivalent safeguards. If you have questions about a specific transfer, contact us.

7. Your rights (including GDPR)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction granting similar rights, you may:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure (the “right to be forgotten”);
  • request restriction of processing;
  • request data portability in a machine-readable format;
  • object to processing based on legitimate interest (including direct marketing);
  • withdraw consent at any time where we rely on consent (without affecting past lawful processing);
  • lodge a complaint with your local supervisory authority (in the EU, find yours at edpb.europa.eu).

To exercise any of these rights, email ohm.sust2@gmail.com. We respond within 30 days. We may need to verify your identity before acting.

8. Reddit users mentioned in our system

The Service ingests public Reddit usernames and content as part of lead monitoring. If you are a Reddit user whose post or comment was surfaced to one of our customers and you wish to be excluded from our index or have related data deleted, email ohm.sust2@gmail.com with the Reddit username concerned and we will action your request within 30 days.

9. Security

We use industry-standard measures including TLS in transit, encryption at rest where supported by our sub-processors, role-based access controls, row- level security in our database, principle-of-least-privilege service credentials, and monitoring. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant regulators without undue delay as required by law.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Cookies

We use only strictly necessary cookies (set by Clerk for authentication and session continuity). We do not currently use advertising or analytics cookies. If we adopt analytics in the future, we will update this Policy and, where required, present a consent banner.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be announced by email or in-app at least 14 days before they take effect.

13. Contact

Reddit Pulse
1B, Jalalia Apartment, Sylhet, Bangladesh
ohm.sust2@gmail.com