Last updated: October 2026
This notice explains how PULSEHUB (SMC-PRIVATE) LIMITED (“PulseHub”, “we”) handles personal data in connection with Pulse, our hostel-management software.
Account data you provide when signing up — name, email, phone, business name, and login credentials. Operational data you enter to run your business — including information about your rooms, staff, and residents (such as names and contact details). Usage data — logs and analytics about how the service is used, to keep it secure and working.
Identity documents and photographs. Where you choose to use those features, Pulse stores identity-document numbers (such as a national identity card, passport or driving licence number) and images of those documents, resident photographs, photographs of utility meters, and documents you upload as compliance evidence. These are held in private storage and are not publicly accessible; identity-document numbers are never shown on public receipts. Uploading them is optional and under your control — you decide which of these features your business uses.
On the mobile app and on a phone browser, Pulse can ask for access to your cameraso you can photograph an identity document, a resident, or a utility-meter reading instead of uploading a file. The camera is used only at the moment you tap to take that photograph, only for that purpose, and never in the background. The image is stored as described above. You can decline the permission and still use Pulse — choose a file from your device instead, or leave the field empty. We do not access your contacts, location, microphone, or photo library beyond the single file you pick.
Card payments are handled by our payment provider, Paddle, who acts as Merchant of Record. We do not collect or store your card details — Paddle processes them under its own privacy terms. For bank-transfer billing we record only that an invoice was issued and settled.
We use Google Analytics 4, loaded through Google Tag Manager, to understand how the product is used in aggregate — for example how many people complete signup, or which features are reached. These set Google cookies or equivalent identifiers and send Google a pseudonymous identifier together with technical information such as device type, browser, approximate location derived from IP address, and the events listed above. Google acts as our processor for this and may process the data outside your country.
We do not send Google your residents’ personal data, identity documents, photographs, or payment amounts, and we do not use analytics for advertising or to build advertising profiles. The tag is present on our public pages too, including an application form or receipt link a resident opens, where it records only the same technical and event information — never the contents of the form.
Some jurisdictions require accommodation providers to register their guests with the authorities. Where you switch this on and supply your own portal credentials, Pulse submits resident details on your behalf to the relevant official government system — in Pakistan, the provincial police “Hotel Eye” guest-registration portals. What is sent is the resident’s name, identity-card number, room or bed, check-in date and, where the portal requires it, their permanent district and province.
You remain responsible for deciding to make these filings and for their accuracy; we act on your instruction. The authority’s own handling of the data is outside our control and governed by local law. Your portal credentials are stored encrypted and used only to make these submissions. This feature is off unless you enable it.
To provide and operate the service, authenticate users, process and record payments, send service and billing communications, provide support, prevent abuse, and comply with legal obligations.
For your own account information, we are the data controller. For information you enter about your residents and staff, you are the controller and we act as a processor on your behalf — you are responsible for having a lawful basis to collect it and for informing those individuals as required by law.
We share data only with service providers who help us run Pulse — including Paddle (payments), our hosting and database infrastructure, email and messaging providers used to deliver notifications, and Google (analytics) — and where required by law, or where you instruct us to file resident details with a government authority as described in section 5. We do not sell personal data.
We keep data for as long as your account is active and as needed to provide the service, then for any period required to meet legal, tax, or accounting obligations, after which it is deleted or anonymised. When you delete your account, the operational data goes immediately; the invoices we issued you are retained with your name and contact details stripped, because tax and accounting law requires the financial record.
We use technical and organisational measures — including encryption in transit, access controls, and role-based permissions — to protect data. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. To make a request, contact us at the address below. For resident data held on behalf of a hostel operator, please contact that operator, who is the controller.
Deleting your account. You can delete your account and its data yourself, at any time, from Settings → Delete my account in Pulse. What is removed and what is retained is set out on our account deletion page.
Our providers may process data in other countries. Where data is transferred internationally, we rely on appropriate safeguards as required by applicable law.
We may update this notice; the “last updated” date reflects the current version.
Privacy questions or requests: hello@yourpulse.io.
PULSEHUB (SMC-PRIVATE) LIMITED, Flat #104, Block-B, Bait-ul-Hina Apartment, Gulistan-e-Johar, Gulshan Town, Karachi East, Sindh, Pakistan.