1. Who we are and how to contact us
PulseHireX is operated by Question Techs, 1007 N Orange St, Wilmington, DE 19801. Legal notices, privacy requests, security reports and support requests may all be sent to info@pulsehirex.com and are routed internally to the responsible team.
The contracting documents or order form identify the applicable business address and contracting entity details for each customer relationship.
2. Our roles
Question Techs acts as a controller when it decides how to process website enquiries, account administration, billing, service-security and marketing information. For customer data submitted to a contracted workspace, Question Techs generally acts as processor or service provider on the customer's documented instructions; the customer remains controller or business.
3. Information we collect
We process information supplied directly, generated through use of the service, or received from an organization administrator.
- Identity and account data, including name, work email, organization, role and account status.
- Authentication and security data, including password hashes handled by the authentication service, MFA enrolment state, recovery-code status, sign-in attempts and security events.
- Customer-uploaded secrets and resource details, including usernames, passwords, approved URLs and access assignments. Secret values are used to provide authorized launch or autofill functions and are not intended for ordinary activity logs.
- Technical data, including IP address, browser and device information, timestamps, page paths, request metadata and diagnostic records.
- Usage and audit data, including workspace pages opened, PulseHireX launch activity, administration actions and, where supported, managed session events.
- Support, sales and marketing data, including messages, demo bookings, trial or pricing requests, company size, use cases and communication preferences.
- Essential cookie and local-storage data described in the Cookie Notice.
4. Purposes and legal bases
We use information to provide and secure the service, authenticate users, enforce permissions, process authorized launches, administer customer workspaces, respond to requests, maintain records, prevent misuse, improve reliability and comply with law.
- Contract: providing requested services and account support.
- Legitimate interests: protecting accounts, preventing fraud, maintaining auditability, improving reliability and responding to business enquiries, balanced against individual rights.
- Consent: where required for optional communications or non-essential technologies; consent may be withdrawn.
- Legal obligation: tax, accounting, lawful requests, disputes and regulatory duties.
- Customer instructions: processing customer data as processor or service provider under the DPA.
5. Disclosure and subprocessors
Information may be shared with authorized customer administrators, personnel who need it to operate the service, professional advisers, authorities where legally required, and vetted subprocessors that provide hosting, database, authentication, email or operational services. We do not sell personal information or share it for cross-context behavioral advertising. The current Subprocessor List identifies material providers.
6. International transfers
Providers and personnel may process information outside the user's state or country. Where required, we use contractual safeguards such as Standard Contractual Clauses, applicable adequacy decisions, or another lawful transfer mechanism. Customers may request relevant transfer information through info@pulsehirex.com.
7. Retention, deletion and backups
We retain information for the service term and then only as needed for contractual, security, dispute, tax or legal purposes. Retention varies by record type and customer instructions. Deletion from active systems does not always remove data immediately from encrypted backups; backup copies age out under controlled schedules and are not restored except for recovery. The Data Deletion and Return Policy describes the operational process.
8. Account termination
After termination, access is disabled. Subject to the agreement, law and security requirements, customers may request an export during the stated return window and deletion of customer data. Some audit, billing, legal-hold and security records may be retained where necessary.
9. Security
We use organizational and technical controls designed to protect information, including access restrictions, MFA requirements, logging and reviewable administration. No system is completely secure. Customers remain responsible for endpoint security, authorized users, client-system permissions and client-side MFA.
10. Rights and choices
Depending on location, individuals may request access, correction, deletion, restriction, portability or objection; withdraw consent; or appeal a denied request. California and other U.S. state residents may also have rights to know, correct or delete information and to opt out of sale, sharing or targeted advertising. We do not currently sell personal information or use it for cross-context behavioral advertising. Authorized agents may submit requests where law permits. We verify requests and may decline or limit them where an exemption applies.
- Submit requests to info@pulsehirex.com.
- Users of a customer-managed workspace should first contact their organization, which may be the controller.
- EEA/UK users may complain to their local data-protection authority.
- U.S. residents may appeal a denied request by replying to our decision.
11. Children
PulseHireX is a business service not directed to children. We do not knowingly collect personal information from children under 13 or any higher minimum age required by local law. Contact info@pulsehirex.com if you believe a child supplied information.
12. Changes and complaints
We may update this Policy as the service or law changes. Material changes will be posted with a new effective date and, where appropriate, notified to customers. Questions or complaints should be sent to info@pulsehirex.com. We will investigate and explain available escalation rights.