Privacy Policy

Last updated: May 2026

SLApulse ("we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, why we collect it, and how we handle it when you use SLApulse.

1. Who we are

SLApulse is a SaaS product that provides proactive SLA monitoring on top of issue management systems (currently Jira Cloud, with more platforms on the roadmap). We are the data controller for personal data collected through slapulse.com and app.slapulse.com. Contact us at contact@slapulse.com with any questions.

2. What data we collect

• Account data: Name, email address, and password (hashed) when you sign up.
• Issue and webhook data: Issue keys, status, timestamps, and priority forwarded to us via webhooks from your issue management system. We deliberately do not collect issue titles, body text, comments, or attachments — only the structured metadata needed to calculate SLA status.
• SLA configuration data: Project-specific SLA rules, business-hour calendars, and escalation settings you define within SLApulse.
• Usage data: Log data including IP addresses, browser type, and pages visited, used for security monitoring and service improvement.
• Billing data: Subscription plan and invoice history. Payment card details are handled exclusively by our payment processor (Stripe) and are never stored by SLApulse.

3. How we use your data

• To deliver and operate the SLApulse service.
• To calculate SLA breach status, elapsed time, and health metrics.
• To send transactional emails (verification, password reset, SLA alerts you configure).
• To respond to support requests.
• To detect and prevent abuse and security incidents.
• To comply with legal obligations.

We do not sell your data. We do not use your data for advertising.

4. Legal basis for processing (GDPR)

• Contract performance: Processing your account and issue data is necessary to deliver the service you have subscribed to.
• Legitimate interests: Security monitoring, fraud prevention, and service improvement.
• Legal obligation: Retaining records as required by applicable law.
• Consent: Where we send optional communications, we rely on consent which you may withdraw at any time.

5. Data retention

Account data is retained for the duration of your subscription and deleted within 90 days of account closure upon request. Issue and SLA data is retained for 12 months of history by default. Logs are retained for 30 days.

6. Data sharing and sub-processors

We use a limited number of sub-processors to operate the service:

• Railway — infrastructure hosting (servers and database storage).
• Stripe — payment processing.
• Resend — transactional email delivery.
• MongoDB Atlas — database, if applicable to your deployment.

All sub-processors are contractually bound to handle data securely and in compliance with GDPR. We do not share your data with any other third parties except where required by law.

7. International transfers

Your data may be processed in the European Union or the United States depending on the infrastructure region. Where data is transferred outside the EU, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

8. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Lodge a complaint with your national supervisory authority.

To exercise any of these rights, email contact@slapulse.com. We will respond within 30 days.

9. Security

We use industry-standard security practices including encrypted data transmission (TLS), hashed passwords, and access controls. No system is completely secure; we encourage you to use a strong, unique password and contact us immediately if you suspect unauthorised access.

10. Cookies

slapulse.com uses no third-party tracking cookies. We use a session cookie strictly necessary for authentication in app.slapulse.com. We do not use advertising or analytics cookies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or an in-app notice. The latest version is always available at this URL.

12. Contact

For any privacy-related questions or requests: contact@slapulse.com