Privacy Protection Policy – PulseWriter.ai

Last Update: 12/27/2025

This Privacy Protection Policy (hereinafter the "Policy") aims to inform users (hereinafter the "Users") of the PulseWriter.ai service (hereinafter the "Service") about how their personal data is collected, processed, and protected, in accordance with Regulation (EU) 2016/679 (GDPR), the French Law No. 78-17 known as "Informatique et Libertés," and any applicable regulations.

This Policy is an integral part of the General Terms of Use (TOU).

1. Data Controller

The data controller is: Eric Vialle – V Studios Domiciled in Maisons-Laffitte, France.

DPO / Personal Data Contact: dpo@pulsewriter.ai

2. Scope and Acceptance

Use of the Service implies express and unreserved acceptance of this Policy. The User acknowledges having read the purposes, legal bases, and methods of processing described below.

The Service is reserved for individuals aged 15 years or older. PulseWriter.ai does not knowingly collect data from minors under the age of 15.

PulseWriter.ai reserves the right to modify the Policy at any time. The applicable version is the one published online at the date of use of the Service.

3. Categories of Processed Data

3.1 Data Provided Directly by the User

  • Identification Data: first name, last name, email, profile picture.
  • Editorial Profile (Copywriter Profile): writing style, marketing objectives, target audience, content examples.
  • Prompts, generated content, and history (inputs / outputs).

⚠️ User Responsibility: The User is solely responsible for the data they enter. If they voluntarily include sensitive data (Article 9 GDPR), they acknowledge giving their explicit consent to its processing strictly for content generation purposes.

3.2 Data from Third-Party Services (LinkedIn)

In the context of authentication and content publication, PulseWriter.ai may access the following data, according to the authorizations granted by the User:

  • LinkedIn Identity (first name, last name, email, URN, photo).
  • Authorization to publish on the User's LinkedIn account.

PulseWriter.ai never accesses private messages, news feeds, or interactions within the User's network.

3.3 Technical and Navigation Data

  • IP address, logs, timestamps, user-agent.
  • Pseudonymized analytical data (Google Analytics, ContentSquare).

4. Purposes and Legal Bases

Purpose Legal Basis
Account creation and management Performance of contract
AI Content Generation Performance of contract
Personalization of experience (writing suggestions, source selection) Performance of contract
Automated LinkedIn publication Consent
UX and performance analysis Consent
Security, abuse prevention Legitimate interest
Voluntarily entered sensitive data Explicit consent

5. Artificial Intelligence

  • The Service provides writing assistance and does not constitute legal or professional advice.
  • No decisions producing automatic legal effects are made.
  • Generated content must be reviewed, verified, and validated by the User before any publication.
  • User data is not used to train public models without explicit agreement.

6. Data Localization and Cloud Services

Personal data processed as part of the Service is primarily hosted and processed within the European Union, on infrastructures located notably in France, Ireland, and Sweden, depending on the nature of the services used.

The Service relies on cloud services provided by Amazon Web Services (AWS), notably S3, RDS, and AWS Bedrock. Stored data (databases, files, drafts, generated content) is kept in AWS European Union regions configured by PulseWriter.ai.

In the context of using managed services and artificial intelligence models (AWS Bedrock), certain incidental technical processing (maintenance, security, supervision, operational metadata, or support) may involve occasional or indirect access from countries outside the European Union, without transfer of primary data storage.

These potential accesses are strictly governed by:

  • Standard Contractual Clauses (SCC) adopted by the European Commission;
  • The Amazon Web Services Data Processing Addendum (DPA);
  • and appropriate technical and organizational measures ensuring a level of protection in accordance with the GDPR.

7. Subprocessors and Recipients

Data may be transmitted only to strictly necessary subprocessors:

  • Amazon Web Services (AWS) – hosting (S3, RDS) and AI inference (Bedrock) – EU regions (Ireland, France)
  • OVH Cloud – storage and backups (France)
  • Google Ireland Ltd – analytics
  • ContentSquare – UX analysis
  • LinkedIn – authentication and publication

Each subprocessor is bound by an agreement in accordance with Article 28 of the GDPR.

8. Transfers Outside the European Union

When transfers outside the EU are necessary, they are governed by Standard Contractual Clauses or mechanisms recognized by the European Commission.

9. Retention Periods

  • Active account: duration of use of the Service.
  • Inactive account: deletion after 24 months.
  • Post drafts data: possible deletion within 30 days.
  • Security logs: maximum 12 months.

PulseWriter.ai reserves the right to anonymize certain data for statistical purposes.

10. Security

Implemented measures:

  • TLS/HTTPS encryption.
  • Restricted and logged access.
  • Logical data isolation.
  • Organizational measures in line with the state of the art.

11. User Rights

In accordance with the GDPR, the User has the rights of access, rectification, erasure, restriction, portability, and objection.

The User can withdraw their consent at any time (cookies, LinkedIn publication) without affecting the lawfulness of previous processing.

Exercise of rights: dpo@pulsewriter.ai Complaint possible with the CNIL (or local supervisory authority).

12. Cookies

The Service uses:

  • Strictly necessary cookies.
  • Analytical cookies subject to consent.

Preferences can be modified at any time.

13. Limitation of Liability

PulseWriter.ai cannot be held responsible for:

  • the accuracy, legality, or compliance of generated content;
  • the use made by the User of the produced texts;
  • consequences related to publication on third-party platforms;
  • any loss, alteration, or temporary or permanent unavailability of post drafts, generated content, prompts, histories, or any other data stored in the Service.

The Service is provided in SaaS mode, without guarantee of availability, retention, or restoration of data. It is up to the User to perform regular backups of their content.

The User remains solely responsible for their content and its dissemination.

14. Contact

PulseWriter.ai – V Studios Maisons-Laffitte, France Email: dpo@pulsewriter.ai