Privacy Policy
PulsePM — Unified Project Management Platform
Operated by Synerbit (OPC) Private Limited
Introduction
Welcome to PulsePM ("Platform", "we", "us", "our"), a unified project management platform operated by Synerbit (OPC) Private Limited, a company incorporated under the Companies Act, 2013, with its registered office at:
PulsePM is accessible via our web application at app.pulsepm.in and our mobile application (collectively referred to as the "Services").
This Privacy Policy explains how we collect, use, store, share, protect, and process your personal data and sensitive personal data when you use our Platform. It also describes your rights as a data principal under applicable Indian laws.
Legal Framework
This Privacy Policy is drafted in compliance with the following Indian laws and regulations:
Who We Are (Data Fiduciary)
Under the Digital Personal Data Protection Act, 2023, Synerbit (OPC) Private Limited is the Data Fiduciary responsible for determining the purpose and means of processing your personal data.
| Detail | Information |
|---|---|
| Company Name | Synerbit (OPC) Private Limited |
| Platform Name | PulsePM |
| Platform URL | app.pulsepm.in |
| Country of Incorporation | India |
| Governing Law | Laws of the Republic of India |
| Grievance Officer | See Section 16 |
Personal Data We Collect
We collect the following categories of personal data ("Personal Data"):
4.1 Data You Provide Directly
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, display name | Account creation, profile display |
| Contact Data | Email address | Authentication, notifications, invitations |
| Authentication Credentials | Email + password (encrypted), Google OAuth token | Secure login |
| Profile Information | Profile photo, avatar initials | Platform personalisation |
| Project Data | Project names, descriptions, categories, deadlines | Core service functionality |
| Task Data | Task titles, descriptions, status, due dates, priority | Core service functionality |
| Collaboration Data | Task assignments, project member lists, roles | Team collaboration features |
| Communication Data | Comments on tasks, @mentions | In-platform communication |
| Subtask Data | Subtask names, completion status | Project breakdown features |
| Invitation Data | Email addresses of people you invite | Project onboarding |
4.2 Data Collected Automatically
| Data Category | Examples | Purpose |
|---|---|---|
| Usage Data | Features accessed, pages visited, actions performed | Product improvement, analytics |
| Device Data | Browser type, operating system, screen resolution | Compatibility and support |
| Log Data | IP address, access timestamps, error logs | Security, debugging |
| Session Data | Login/logout timestamps, session duration | Security monitoring |
| Local Storage Data | Cached project/task data stored on your device | Offline functionality and performance |
4.3 Data from Third Parties
When you sign in using Google Sign-In (Google OAuth 2.0), we receive from Google:
- Your name
- Your email address
- Your Google profile picture
We only request the minimum permissions necessary to authenticate you. We do not access your Gmail, Google Drive, Google Contacts, or any other Google services.
Sensitive Personal Data or Information (SPDI)
As defined under the SPDI Rules, 2011, we treat the following data as Sensitive Personal Data or Information:
🔒 Passwords
Stored in encrypted form using industry-standard cryptographic methods via Firebase Authentication. We do not store plaintext passwords at any time.
We do not knowingly collect the following categories of sensitive data: financial information, biometric data, health records, sexual orientation, or caste/religion.
How We Use Your Personal Data
We process your Personal Data for the following purposes, relying on lawful bases as applicable under the DPDPA, 2023:
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your account | Consent / Contract performance |
| Providing project and task management features | Contract performance |
| Enabling real-time collaboration between team members | Contract performance |
| Sending email notifications (task updates, invitations, status changes) | Consent / Legitimate interest |
| Syncing data across web and mobile applications | Contract performance |
| Sending platform announcements and service updates | Legitimate interest |
| Detecting, preventing, and addressing security incidents or fraud | Legal obligation / Legitimate interest |
| Complying with applicable laws, regulations, and court orders | Legal obligation |
| Improving, analysing, and developing our Platform | Legitimate interest |
| Resolving disputes and enforcing our Terms of Service | Legitimate interest / Legal obligation |
| Responding to your support requests and queries | Consent / Contract performance |
We will NOT use your data for:
- Selling or renting your Personal Data to third parties
- Targeted advertising without your explicit consent
- Automated profiling that produces legal or significant effects on you
Data Sharing and Disclosure
We do not sell, trade, or transfer your Personal Data to third parties for commercial purposes. We may share your data only in the following circumstances:
7.1 Within the Platform
- Your name, email address, and profile avatar are visible to other members of projects you are part of.
- Your task assignments, comments, and subtask activity are visible to other members of the same project.
- Project admins and creators can view member details within their project.
7.2 Service Providers (Data Processors)
We engage the following trusted service providers who process data on our behalf under strict contractual obligations:
| Service Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Google Firebase / Firestore | Database, authentication, real-time sync | Account data, project data | Google Cloud servers (may include servers outside India — see Section 11) |
| Google OAuth 2.0 | Third-party sign-in | Name, email, profile photo |
All service providers are contractually bound to process data only as instructed by us and to maintain appropriate security measures.
7.3 Legal Requirements
We may disclose your Personal Data if required to do so by:
- Any applicable law, regulation, legal process, or enforceable governmental request
- Orders from courts, tribunals, or regulatory authorities in India
- To protect the rights, property, or safety of Synerbit (OPC) Pvt Ltd, our users, or the public
7.4 Business Transfer
If Synerbit (OPC) Pvt Ltd undergoes a merger, acquisition, restructuring, or asset sale, your Personal Data may be transferred to the successor entity. We will notify you via email or a prominent notice on our Platform before such transfer occurs.
Data Retention
We retain your Personal Data only as long as necessary for the purposes described in this Policy or as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Account data (name, email) | Until you delete your account |
| Project and task data | Until you delete the project/task or your account |
| Authentication logs | 90 days |
| Server/access logs | 180 days |
| Backup data | Up to 30 days after account deletion |
| Invitation data (unaccepted) | 30 days after invitation expiry |
| Data required for legal compliance | As required by applicable Indian law (typically up to 7 years for financial/audit records) |
Upon account deletion, we will delete or anonymise your Personal Data within 30 days, except where retention is required by law.
Data Security
We implement reasonable security practices and procedures as required under Rule 8 of the SPDI Rules, 2011 and the DPDPA, 2023, including:
- Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
- Encryption at rest: Passwords are hashed and salted using Firebase Authentication's industry-standard cryptography. Project and task data is stored securely in Google Firestore with access controlled by Firebase Security Rules.
- Authentication controls: We support email/password login and Google OAuth. We recommend using strong, unique passwords.
- Access controls: Only authorised personnel of Synerbit (OPC) Pvt Ltd can access production systems and data.
- Session management: User sessions are managed securely with automatic timeout mechanisms.
- Local data security: Data cached in your browser's localStorage is protected by browser-level sandboxing.
Cookies and Local Storage
10.1 Cookies
PulsePM may use session cookies and authentication cookies strictly necessary for the Platform to function. These cookies:
- Do not track you across third-party websites
- Are not used for advertising purposes
- Are deleted when you close your browser (session cookies)
10.2 Local Storage
We use your browser's localStorage to:
- Cache your project and task data for faster load times and offline access
- Store your UI preferences (theme, display settings)
- Maintain your login session securely
You can clear localStorage data at any time through your browser settings. Note that clearing it will log you out and remove cached data from your device.
10.3 Third-Party Cookies
Google Firebase SDKs loaded by our Platform may set their own cookies as part of authentication and analytics. Please refer to Google's Privacy Policy for details.
Cross-Border Data Transfers
Our Platform uses Google Firebase (a Google Cloud service) for database and authentication. Google may store and process your data on servers located outside India, including in the United States and other countries.
These international transfers are undertaken in accordance with applicable data protection laws. Google maintains appropriate safeguards for international data transfers under its standard contractual terms.
By using PulsePM, you consent to the transfer of your data to Google's servers as described above for the purpose of providing our Services.
We are committed to monitoring developments under the Digital Personal Data Protection Act, 2023 regarding cross-border data transfers and will update our practices as required by law.
Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
12.1 Right to Access
You have the right to obtain information about what Personal Data we hold about you, the purposes of processing, and entities shared with.
12.2 Right to Correction & Erasure
You have the right to correct inaccurate data and erase data no longer necessary for its original purpose or where consent is withdrawn.
12.3 Right to Grievance Redressal
You have the right to have your grievances addressed within a reasonable timeframe (see Section 16).
12.4 Right to Nominate
You may nominate another individual to exercise your rights in the event of your death or incapacity.
12.5 Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
12.6 How to Exercise Your Rights
To exercise any of the above rights, please contact our Grievance Officer at the details in Section 16. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.
Children's Privacy
PulsePM is a professional project management tool not intended for use by individuals under 18 years of age.
We do not knowingly collect Personal Data from persons under 18. If you are a parent or guardian and believe your child has provided us with Personal Data without your consent, please contact us immediately at the address in Section 16 and we will take steps to delete such information.
Third-Party Links and Integrations
Our Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.
We are not responsible for the privacy practices or content of third-party websites.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- Our business practices
- The Services we offer
- Applicable laws and regulations
When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Display a prominent notice on our Platform at app.pulsepm.in
- Notify you by email (if we have your email address) at least 15 days before the changes take effect for material changes
Your continued use of the Platform after the effective date of the revised Policy constitutes your acceptance of the changes.
Grievance Redressal
In accordance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your concerns regarding this Privacy Policy or your Personal Data.
| Grievance Officer — Synerbit (OPC) Private Limited | |
|---|---|
| Name | Rajeev Ranjan Kumar |
| Designation | Grievance Officer |
| Company | Synerbit (OPC) Private Limited |
| contact@pulsepm.in | |
| Platform | app.pulsepm.in |
| Response Time | Within 30 days of receiving a complaint |
| Registered Office | Block-A, 606 Prahladnagar Trade Center, B/H Titanium City Center, Vejalpur, Ahmedabad, Gujarat — 380051 |
If you believe your complaint has not been adequately addressed, you may also approach the Data Protection Board of India (once operational under DPDPA, 2023) or seek remedies under other applicable Indian laws.
Jurisdiction and Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India. Any disputes arising out of or relating to this Policy or your use of the Platform shall be subject to the exclusive jurisdiction of the courts located in Ahmedabad, Gujarat, India.
Contact Us
For any general questions, feedback, or concerns regarding this Privacy Policy or our data practices, please contact us:
Synerbit (OPC) Private Limited
PulsePM — Unified Project Management Platform
Website: pulsepm.in
Application: app.pulsepm.in
Email: contact@pulsepm.in
Registered Office: Block-A, 606 Prahladnagar Trade Center, B/H Titanium City Center, Vejalpur, Ahmedabad, Gujarat — 380051, India