Privacy Policy

Who is responsible

Canopulse is currently operated by Ronak Macwan under the Canopulse name. Canopulse is the contact for the privacy practices described here. A signed pilot or services agreement may add organization-specific privacy and data-processing terms.

Information we collect

When you create an account, submit a request form, or use authenticated features, we may collect identifiers and professional information such as your name, email, organization, role, account ID, and any message, study-area selection, report request, or project detail you provide. Do not submit medical records, government identifiers, payment-card details, or other sensitive personal information through free-text fields.

Information collected automatically

The service may receive technical information needed for security and operation, including IP address, browser and device characteristics, request time, route, referrer, authentication events, and error or security logs. Vercel Web Analytics provides aggregate page-use data and does not use third-party advertising cookies. Authentication and security services may use cookies or similar storage that is necessary to maintain a session and prevent abuse.

How we use it

We use this information to respond to inquiries, operate your workspace, deliver screening reports, authenticate users, protect the service, diagnose errors, comply with agreements and law, and improve product usability. We do not sell personal information or share it for cross-context behavioral advertising.

Service providers and subprocessors

We use Vercel for hosting and aggregate web analytics, Supabase for authentication and data storage, Resend for transactional email, and Cloudflare Turnstile for spam and abuse protection on public forms. These providers process information under their own agreements and privacy terms. We may use Stripe for subscriptions if commercial checkout is enabled in the future. Commercial checkout is not currently active, and Canopulse does not currently collect payment-card details through the website.

Retention

Unless a longer period is required by law, a signed agreement, or a security need, inquiry and pilot-request records are retained for up to 24 months after the last substantive contact; account and workspace records are retained while an account is active and targeted for deletion within 90 days after a verified closure request; rolling backups may persist for up to 90 additional days; operational and security logs are retained for up to 12 months; and contracts, invoices, and transaction records may be retained for up to 7 years. Canopulse may retain a minimal suppression or request record where needed to honor a privacy choice or legal obligation.

Access, correction, export, and deletion

You may request access to, correction of, export of, or deletion of personal information by emailing contact@canopulse.com with the subject "Privacy request." Canopulse may verify your identity and authority before acting. We aim to respond within 45 days or the shorter period required by applicable law. Some information may be retained where an exception or legal obligation applies.

California privacy rights

Subject to the scope and exceptions of applicable California law, California residents may have rights to know, access, correct, or delete personal information; to opt out of sale or sharing; to limit certain uses of sensitive personal information; and to receive equal service without unlawful discrimination for exercising a privacy right. Canopulse does not sell personal information, share it for cross-context behavioral advertising, or use submitted information to create advertising profiles.

International processing

Canopulse and its providers may process information in the United States and other countries where they operate. Where applicable law requires transfer safeguards, Canopulse relies on provider contractual commitments or another lawful transfer mechanism.

Storage, security, and incidents

Data is stored in Supabase (PostgreSQL) with row-level security on user-owned records. Lead submissions are stored server-side and are not publicly readable. Canopulse uses access controls, encrypted transport, provider security features, and limited administrative access. No system can guarantee absolute security. If an incident affects personal information, Canopulse will investigate, contain, document, and provide notices as required by applicable law.

Children

Canopulse is a professional screening platform and is not directed to children under 13. Do not submit a child's personal information through the service.

Policy changes

Canopulse may update this policy as the product or legal requirements change. The revised date will appear at the top, and material changes will apply prospectively.

Contact

Privacy questions or requests: contact@canopulse.com