Privacy Policy

Fullon Pulse · version 1.1 · effective 13 September 2026

1. Controller

Fullon Advisors Ltd, business ID 2783355-5, Iidesaukio 3, 33100 Tampere, Finland, provides Fullon Pulse (the “Service”) and is the controller for the personal data described below.

Contact: support@fullonpulse.com

2. Our role

We are the controller for account data. For the operational data the Service displays, which originates from the customer organisation’s own contact centre, that organisation is the controller and we act as its processor under our agreement with it.

3. Personal data we process

• Account details: email address, password (stored hashed), and a two-factor secret where enabled.
• Access rights: which wallboards the account may view.
• A session identifier, held in a strictly necessary cookie on the website or in the app.
• A push notification token for each registered device.
• Alert settings created by the user, and a record of alerts triggered.
• Administrative actions taken within the customer’s account.
• Server logs, including IP address.

The Service does not process data identifying callers or individual agents, and performs no advertising or automated decision-making. Measurement of our public website is described in section 10.

4. Purposes and legal bases

• Providing the Service and administering accounts — performance of a contract (Art. 6(1)(b) GDPR).
• Security, abuse prevention and administrative records — legitimate interests (Art. 6(1)(f)).
• Push notifications — consent (Art. 6(1)(a)), given through the device and withdrawable at any time in device settings.

5. Recipients and transfers

Personal data is hosted by Amazon Web Services in the Europe (Frankfurt) region. Push notification tokens and notification content are transmitted through Google (Firebase Cloud Messaging) and, for iOS, Apple, which may involve transfer outside the EEA on the basis of Standard Contractual Clauses approved by the European Commission.

We do not sell personal data or disclose it for third-party marketing. We disclose it otherwise only where required by law.

6. Retention

• Account data: for the life of the account.
• Sessions: until expiry or sign-out.
• Alert history: 90 days.
• Server logs: 30 days.
• Administrative records: retained as a security record.

7. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your personal data, and to data portability. Requests may be sent to support@fullonpulse.com and will be answered within one month. Where the account was issued by an employer, requests may need to be directed to that organisation, and we will say so.

You may lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

8. Security

Access requires authentication and is authorised on every request. Data is encrypted in transit and at rest. In the event of a personal data breach we notify the supervisory authority and, where required, affected individuals, in accordance with Articles 33 and 34 GDPR.

9. Children

The Service is a business tool and is not directed at children.

10. Website visit records

We keep a short record of each visit to the public pages of www.fullonpulse.com — the network address it arrives from, the page, the browser’s user-agent and referrer, and the time — to see how the site is used and to estimate which organisation a visit came from. We do not identify individuals, and nothing is stored on your device, so the cookie banner does not govern it. The basis is our legitimate interest (Art. 6(1)(f) GDPR). Records are deleted after 30 days; the per-organisation counts, which contain no visitor data, are kept for 400 days.

11. Changes

We may update this policy. The version and effective date above identify the current version; material changes are notified to the customer organisation before taking effect.