This Privacy Policy describes how AB Tools ("we", "us", "our") collects, uses, and protects information when you visit pulseedit.com or use our software products (Pulse Edit, Beat Markers).
1. Data We Collect
Website Analytics (Google Analytics 4)
When you accept cookies on our website, we use Google Analytics 4 (measurement ID: G-JV9DJHLCY2) to collect aggregated usage data, including:
- Pages visited and time spent on each page
- Session duration and bounce rate
- Referral source (how you found us)
- General geographic region (country/city level)
- Device type, browser, and operating system
Google Analytics only activates after you accept cookies. If you decline cookies, no analytics data is collected.
Google Analytics 4 does not log or store IP addresses. Our own servers see your full IP address only transiently — for up to 60 seconds, as an anti-abuse rate-limit key — and never store it alongside your purchase, licence or email.
License and Purchase Data
When you purchase a license for Pulse Edit or Beat Markers, the following data is processed:
- Email address (for license delivery)
- Payment information (processed by Stripe; we do not store credit card numbers)
- License key and activation status
- An installation identifier generated at random by the app the first time you activate it (stored in your system keychain — it is not derived from your hardware and does not identify your computer), used only to keep one licence active on one computer at a time
- The app version, operating system and the date of the last licence check, sent by the app when it verifies your licence
Your email address is required to enter into and perform the contract: without it we cannot deliver or manage your licence. The other data above are collected automatically when the app checks the licence and cannot be switched off while the licence is in use — you can stop them by deactivating the licence on that computer.
Product Updates & Email List
When you sign up for product updates or an early-access list on this site, you voluntarily submit your email address. We process it solely to send you updates about the product you signed up for. We also record the date and time of your signup, and your approximate country, IP address and browser user-agent — used only for security and anti-abuse (spam/rate-limiting) and not for profiling.
- Lawful basis: your consent (GDPR Art. 6(1)(a)), given by submitting the form.
- Use: only to notify you about the product you signed up for. We never sell your email, and never share it for anyone else's purposes; it only passes through the service providers listed in section 5 that deliver our emails and run our servers. You won't receive unrelated marketing.
- Withdraw anytime: every email includes an unsubscribe link, or write to support@pulseedit.com to be removed. Withdrawing consent does not affect prior lawful processing.
- Retention: kept until you unsubscribe or ask us to delete it.
Checkout reminder: the checkout page has an optional box, unticked by default, to receive occasional offers and reminders about Pulse. Only if you tick it and don’t complete the purchase, we may send you one reminder email about that checkout, with an offer. Lawful basis: your consent (Art. 6(1)(a)); every such email has an unsubscribe link, and if you leave the box unticked you get no such email.
Feedback Form
When you fill in our feedback form, we store your answers on our licence server (hosted by Cloudflare) so we can read them and improve the product. If you choose to leave your email — it is optional — we use it only to reply to you about that message. A copy of the message is also sent to the operator’s private Telegram channel as an internal notification (see “Telegram” in section 5).
- Lawful basis: our legitimate interest in improving the product (Art. 6(1)(f)); the optional email is used solely to reply to you.
- Retention: up to 24 months.
Software Usage — Pseudonymous Diagnostic Data
Our desktop applications (Pulse Edit, Pulse Studio, Beat Markers) collect a minimal amount of pseudonymous diagnostic data to help us detect crashes and improve product reliability. Specifically:
- Crash reports: when the app crashes, we receive the exception type, error message, and stack trace (with user file paths removed). No file contents, audio, video, or project data are sent.
- Application boot events: a record that the app was started, with version and operating system.
- Workflow failures: when an internal operation fails (e.g. beat detection, render), we log the failure type to help diagnose recurring issues.
- Coarse network location: the first portion of your IP address (country-level only — never the full address), stored with the report and deleted after 30 days.
Each device generates a pseudonymous identifier (SHA-256 hash of the machine’s hostname, truncated to 24 characters) used to deduplicate reports. This identifier is not linked to your name, email, payment information, or any other personal data. For Pulse Studio (licensed), crash data is also not linked to your license key or email. (The app version and operating system are, however, also stored on your licence record, as described under License and Purchase Data.)
How to opt out: create a plain-text file named telemetry.json containing exactly {"enabled": false} at the location below for your app (create the folder if it does not exist yet), then restart the app. A toggle in the app settings is in the works. File locations:
- Pulse Edit — macOS:
~/Library/Application Support/PulseEditFree/telemetry.json· Windows:%APPDATA%\PulseEditFree\telemetry.json - Pulse Studio — macOS:
~/Library/Application Support/PulseEdit/telemetry.json· Windows:%APPDATA%\PulseEdit\telemetry.json
Crash reports are retained for 30 days, then deleted automatically.
2. How We Use Your Data
- Website analytics: to understand how visitors find and use our site, and to improve our content
- Email address: to deliver license keys and important product updates
- License data: to validate software licenses and prevent unauthorized use
3. Lawful Basis for Processing
Under GDPR Article 6, we process your personal data on the following legal grounds:
- Consent (Art. 6(1)(a)) — for non-essential cookies (Google Analytics, Cloudflare Insights, download-click tracking), for signing up for product updates, and for the optional offers box at checkout (we only email you with your consent). You may withdraw consent at any time via the “Manage cookies” link in the footer, an email unsubscribe link, or by contacting us.
- Performance of a contract (Art. 6(1)(b)) — for processing your purchase, issuing license keys, and providing software updates after you buy.
- Legal obligation (Art. 6(1)(c)) — for tax, invoicing, and accounting records required by Italian and EU law.
- Legitimate interest (Art. 6(1)(f)) — for essential site security (e.g. DMARC monitoring, error logs, fraud prevention), for replying to support emails you initiate, and for collecting pseudonymous diagnostic data to keep the desktop software reliable. You can opt out at any time (see Software Usage above).
4. Cookie Consent
We use a cookie consent banner on our website. Google Analytics cookies are only loaded after you click "Accept". Your preference is stored in your browser's local storage under the key cookie_consent.
Cookies and similar technologies
cookie_consent— first party, local storage, technical: stores your choice. Stays until you delete it. No consent required._ga,_ga_JV9DJHLCY2— Google Analytics 4, analytics. Loaded only after you click Accept. Duration: up to 2 years.- Cloudflare Web Analytics — no cookie, no local storage. Loaded only after you click Accept.
- Click analytics (
/track-click, our own Cloudflare Worker) — no cookie; records which link was clicked and on which page. Sent only after you click Accept. __stripe_mid,__stripe_sid— set by Stripe on our checkout page for fraud prevention; strictly necessary to process a payment. Duration: about 1 year and 30 minutes respectively.- Order session id — session storage on the thank-you page, technical: retrieves your licence after payment. Deleted when you close the tab.
How to Withdraw Consent
You can withdraw cookie consent at any time: click “🍪 Manage cookies” at the bottom-left of any page and choose Decline. Declining stops analytics immediately. Google Analytics cookies already stored on your device (_ga, _ga_JV9DJHLCY2) are no longer read by us once you decline; you can remove them at any time from your browser’s cookie settings. If you prefer, you can also clear this site’s local storage in your browser:
- Open your browser's Developer Tools (F12 or right-click > Inspect)
- Go to the Application or Storage tab
- Under Local Storage, find pulseedit.com
- Delete the
cookie_consententry - Refresh the page; the consent banner will appear again
5. Third-Party Services
Google Analytics
We use Google Analytics 4 for website analytics. Google may process data on servers outside the EEA — see “International transfers” below. For more information, see Google's Privacy Policy.
Stripe
Payments are processed by Stripe, Inc. We do not store or have access to your full credit card details. Stripe handles all payment data securely. See Stripe's Privacy Policy.
GitHub
This website is hosted on GitHub Pages (GitHub, Inc., USA). Like any web host, GitHub may log your IP address and browser user agent in its server logs when you visit any page of this site. See GitHub's Privacy Statement.
Fonts
The typefaces used on this website (Inter, Bricolage Grotesque, Hanken Grotesk, IBM Plex Mono and IBM Plex Sans, all released under the SIL Open Font License) are stored on and served from this website itself, together with its pages (see GitHub above). Loading a page does not connect your browser to Google Fonts or to any other third-party font service.
Cloudflare
Cloudflare, Inc. (USA) runs our licence server and our download mirror, and hosts the database in which licence keys, purchase email addresses and feedback messages are stored. When you download a file, activate a licence or click a tracked link, Cloudflare processes connection data including your IP address and browser user-agent, in order to deliver the file, validate the licence and protect the service from abuse. Cloudflare also provides the cookieless Web Analytics beacon, which loads only after you accept cookies. See Cloudflare's Privacy Policy.
Downloads (Cloudflare) and GitHub
Our installers are served from our own download mirror running on Cloudflare Workers (pulse-edit-mirror.abtools.workers.dev). A few older Beat Markers links still point to GitHub Releases; GitHub may log your IP address when you download from them. When a download starts, our mirror records the file name, date, country, connecting network (ISP) and browser user-agent, in order to count downloads and to tell real users apart from bots (legitimate interest, Art. 6(1)(f)). Your IP address is used only momentarily, to avoid counting the same download twice, and is not retained by us. A summary of this event is sent to a private Telegram channel used by the operator as an internal notification.
Resend
Transactional emails (licence keys, receipts, support replies) are delivered by Resend, Inc. (USA). Your email address and the content of those messages pass through their servers. See Resend's Privacy Policy.
Telegram
We receive an internal notification on a private Telegram chat, read only by the operator, for each order (product, amount and the purchase email address), each feedback message submitted through our feedback form (including the message text and, if you provide it, your email address) and each download (country and browser user agent). These notifications are delivered through Telegram's servers, which are located outside the EU. See Telegram's Privacy Policy. If you prefer not to have your feedback forwarded this way, write to support@pulseedit.com instead of using the form.
International transfers
Some of the services above are established outside the European Economic Area (United States and other countries), or may process data on servers outside the EEA. Where the recipient is certified under the EU–US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision of 10 July 2023 (Implementing Decision (EU) 2023/1795). In all other cases the transfer relies on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR), incorporated in each provider's data processing agreement. You can obtain a copy of the safeguards applying to a specific transfer by writing to support@pulseedit.com.
6. Data Retention
- Analytics data: retained for 14 months, then automatically deleted by Google Analytics
- License and purchase data: your licence key, activation status and the email you bought with are kept for as long as your licence exists. The related invoice is kept for 10 years from the date it was issued, because Italian tax law requires it (art. 2220 Italian Civil Code, art. 22 DPR 600/1973). You can ask us at any time to delete anything not covered by that obligation.
- Payment records: retained by Stripe according to their data retention policy and legal requirements
- Support emails: up to 24 months after our last exchange with you.
- Feedback form: your answers are kept for up to 24 months; the email field is optional and used only to reply to you.
- Licence-server and download-mirror logs: only for the short period our infrastructure provider (Cloudflare) keeps them, a few days.
7. Data Sharing
We do not sell, trade, or rent your personal data to third parties.
We share your data only with the third-party services listed in section 5 above (Google Analytics, Stripe, Cloudflare, Resend, Telegram and GitHub), each strictly for the purposes described there. Some of them act as our service providers on our instructions; others, such as Stripe for payment data, act as independent controllers under their own privacy policies. We share your data with no one else, except where we are required to do so by law.
8. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data
- Right to restrict processing: request that we limit how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing of your data for certain purposes
One limit applies to erasure: where the law requires us to keep a document — in particular invoices and tax records — we cannot delete it on request (GDPR Art. 17(3)(b)). In that case we stop using the data for anything other than that legal purpose, and we delete it when the retention period ends.
To exercise any of these rights, contact us at the email address below.
9. Security
We take reasonable measures to protect your data, including HTTPS encryption on our website, secure API communication for license validation, and using trusted third-party processors (Stripe, Google, Cloudflare, GitHub, Resend).
10. Children's Privacy
Our website and software are not directed at children under 16. We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
12. California (CCPA) Rights
We do not sell personal information. California residents may request access to, deletion of, and opt-out of any data sharing of their personal information by contacting support@pulseedit.com. We respond to verifiable consumer requests within 45 days, as required by the California Consumer Privacy Act (CCPA).
13. Contact
For privacy-related questions or to exercise your GDPR or CCPA rights, contact us at:
Email: support@pulseedit.com
Operator: AB Tools / Abramo Benedetti
Legal address: Via M. Bertini 32, 55100 Lucca, Italia
VAT ID: IT02742450469
Right to complain: You have the right to lodge a complaint with the Italian data protection authority — Garante per la protezione dei dati personali (garanteprivacy.it).