Privacy Policy

Until each organiser publishes their own policy, Pulsea applies these platform defaults to all registration data:

Your profile data is stored in the EU (Supabase, Frankfurt) and processed under GDPR + Swiss nFADP.
Passport details are encrypted at rest with AES-256-GCM. Only authorised event staff with the Visa Manager role can decrypt them, and every decrypt is logged.
Your GlobalProfile (name, organisation, contact details) is shared only with the entities you've registered for. Cross- entity visibility is opt-in via the networking toggles in your profile.
You can update your own profile details at any time (rectification). Every other request — access (including receiving a copy of your personal data), erasure, restriction of processing, data portability, or any rectification beyond your profile details — is made to the event organiser (the data controller); Pulsea, as processor, assists and can be reached at support@usepulsea.com if the organiser is unavailable. Your request is actioned without undue delay and within one month, subject to any extension permitted by GDPR Article 12(3). Financial records are retained for ten years for tax compliance. Personal data is erased or anonymised in response to a valid request, except where continued processing or retention is permitted or required by law.
Marketing emails are sent only if you've opted in. Transactional emails (receipts, visa letters, session reminders) are required to complete the service you've registered for.

Last updated 2026-04-23. To exercise your data-subject rights, requests are made to the event organiser (the data controller); Pulsea, as processor, assists and can be reached at support@usepulsea.com if the organiser is unavailable.