Privacy Policy

Effective Date: 24 March 2025
Website: https://pulsestock.pro
Contact: [email protected]

PulseStock.pro ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR), Strong Customer Authentication (SCA), and PSD2.

1. Who We Are

PulseStock.pro is an online marketplace offering AI-generated stock photos, music, and illustrations.
Data Controller: PulseStock.pro
Email: [email protected]
Jurisdiction: United Kingdom.

2. What Personal Data We Collect

We may collect and process the following data:

Account Information: Name, email address, username, password.
Billing Details: Payment method, billing address (via third-party processors).
Transaction Data: Top-ups, purchase history, currency preference.
Usage Data: IP address, browser type, pages visited, time spent.
Communication Data: Customer support messages, inquiries, feedback.
Authentication Data: For secure transactions (SCA compliance).

3. How We Use Your Data

We use your data to:

Create and manage your user account
Process payments and top-ups (via third-party processors)
Deliver purchased digital content
Improve and personalize your user experience
Respond to inquiries and support requests
Enforce our Terms and Conditions
Comply with legal obligations (including PSD2/SCA)

4. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on the following legal bases:

Consent – for optional communications like newsletters.
Contract – to provide services you request (e.g., purchases).
Legal Obligation – to comply with financial, tax, or regulatory requirements.
Legitimate Interests – to improve the platform and protect from fraud.

5. Strong Customer Authentication (SCA) and PSD2 Compliance

All payment transactions are securely processed by compliant third-party providers. Where applicable, multi-factor authentication (MFA) is required during payments to comply with SCA, part of the PSD2 regulation.

6. Third-Party Services

We use trusted third parties to process payments and analytics. These providers comply with GDPR and other relevant regulations:

Payment Providers (e.g., Stripe, PayPal): For processing top-ups and transactions.
Analytics Tools (e.g., Google Analytics): For usage insights.

We do not sell, rent, or share your data with third parties for marketing.

7. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy:

Account data: For the duration of your account.
Transaction data: For up to 7 years, per financial regulations.
Communication records: For up to 3 years.

8. Your Rights Under GDPR

You have the right to:

Access your data
Correct inaccurate data
Delete your data (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time

To exercise your rights, contact us at [email protected].