Last updated: October 2026

Privacy Policy

XNA Creatives LLP (“TimerPulse”, “we”, “us”) — Bangalore, India. Privacy contact: support@timerpulse.com.

This policy describes how we handle personal data when you visit our sites, purchase access, or use the TimerPulse service (the “Service”). Related documents: Terms, Data Processing Addendum (DPA), Refunds.

Scope

This policy applies to account holders, purchasers, and visitors of TimerPulse. If you operate campaigns, your subscribers who interact with timers or links are generally your responsibility as data controller; we process their data as a processor under our DPA and your instructions. Those individuals should contact you first; we help you respond when required by law.

Information we collect

  • Account: email, hashed password, optional name, plan and access status, session data.
  • Billing: order references and paid-access flags from our payment provider (we do not store full card numbers).
  • Service: campaign settings, URLs, embed configuration, encrypted ESP API credentials when you connect Kit, MailerLite, or Birdsend.
  • Timer activity: subscriber identifiers you or your ESP supply (for example merge-tag output in links), plus limited logs (IP, request metadata) for security and reliability.
  • Support: information you send via contact or support email.
  • Website: browser/device and usage data on our marketing site where analytics or cookies are enabled.

How we use it

We use personal data to operate and secure the Service, process payments and account access, provide support, prevent abuse, comply with law, and improve the product (including aggregated insights). Where GDPR applies, we rely on contract, legitimate interests, consent (where required), or legal obligation as appropriate.

Sharing

We use service providers to host, bill, email, and secure the Service. We share data with ESPs you connect, professional advisers when needed, and authorities when required by law. We do not sell personal data. Current sub-processors: Subprocessors.

International transfers

We are based in India and use providers that may process data in other countries. Where required, we use appropriate safeguards (including EU Standard Contractual Clauses and UK transfer terms) as described in our DPA.

Retention

We keep data while your account is active and as needed for backups, disputes, security, and legal obligations, then delete or anonymize it. Billing records may be kept longer where law requires.

Security

We use HTTPS, hashed passwords, and encryption for stored integration secrets. No method is perfectly secure.

Your rights

Where applicable law provides them, you may request access, correction, deletion, portability, restriction, or objection, or withdraw consent where we rely on consent.

Email support@timerpulse.com from your account or purchase email. We may verify your identity. We aim to respond within 30 days (GDPR/UK) or 45 days (California). California residents: we do not sell personal information for money. You may complain to your data protection authority (EEA/UK) if unsatisfied with our response.

Cookies

The member app uses essential session and security cookies. Our marketing site may use analytics or consent-managed cookies where enabled. Embeds on your pages may use storage to run timers—you are responsible for notices and consent for your visitors.

Children

The Service is not directed to children under 13.

Changes

We may update this policy; the date at the top shows the current version.