Privacy Policy

1. Scope and Acceptance of This Policy

This Policy applies to information collected through the Service, including the Pulzer website, web application, and any related services, features, or functionality. The Service is intended for use within the United States. This Policy does not apply to the practices of third parties that Pulzer does not own or control, including the third-party artificial intelligence providers and advertising partners described in Sections 4 and 7, except as expressly described herein.

2. Information We Collect

2.1 Information You Provide Directly. When you register for the Service, you provide a username and a password. Your password is processed through the Argon2id key-derivation function and stored solely in the form of a one-way cryptographic verifier. The plaintext of your password is never stored and cannot be retrieved by Pulzer. Upon registration, you are issued a twelve-word recovery phrase, which is displayed to you once and is stored only in the form of a one-way verifier. You may also elect to provide information in connection with the memory features of the Service, including user details and user preferences, and you may submit prompts, messages, and other content to the Service. If you participate in the referral program of the Service, you may provide a referral code, and Pulzer collects information relating to referrals, including the relationship between referring and referred accounts and referral earnings.

2.2 Information Collected Automatically. In connection with your use of the Service, Pulzer automatically collects the following categories of information: (a) your IP address and a coarse geographic location derived therefrom, including country, state, and city, which derivation is performed using an offline database residing on the servers of Pulzer; (b) the date and time of each request; (c) technical usage information, including the model and provider used to generate a response, the thinking level selected, token counts, caching statistics, and cost metrics; and (d) records of advertisements served to you, including impression identifiers.

2.3 Information Not Collected. The Service does not collect your email address at the time of registration, does not collect your real name, and does not collect any payment information. The Service does not employ cookies or similar technologies for the purpose of building advertising profiles and does not track your activity across third-party websites. The Service does, however, use functional httpOnly session cookies to maintain your authenticated session and to hold the encryption key required to process your requests for the duration of your session, and uses browser local storage to remember certain interface preferences, such as your theme selection.

3. How We Use Information

Pulzer uses the information described in Section 2 for the following purposes:

• to operate, maintain, and improve the Service, including encrypting and decrypting your content and assembling conversation context;
• to generate responses to your prompts through third-party artificial intelligence providers, as further described in Sections 4.3 and 5;
• to store and retrieve information that you request the Service to remember;
• to measure usage and cost for the purpose of maintaining the Service at no charge to users;
• to detect, prevent, and address fraud, abuse, and violations of the Terms of Service, including the enforcement of rate limits;
• to prepare aggregate, non-identifying analytics, including metrics concerning the number of active users of the Service; and
• to serve contextual advertisements, as further described in Section 7.

4. Encryption and Security of Information

4.1 Encryption at Rest. All user content, including prompts, responses, chat titles, memory entries, and preferences, is encrypted at rest using the Advanced Encryption Standard with 256-bit keys operating in Galois/Counter Mode (AES-256-GCM). The encryption keys utilized by the Service are derived from your password and your recovery phrase using established key-derivation functions, including Argon2id and scrypt. Pulzer stores only wrapped encryption keys and verifiers, and does not store plaintext user content in persistent storage. For clarity, the request metadata described in Section 2.2, including your IP address, derived geographic location, timestamps, model and provider identifiers, token counts, caching statistics, cost metrics, and advertising records, is stored unencrypted.

4.2 Encryption in Transit. Information transmitted between your device and the Service is encrypted in transit using Transport Layer Security (TLS).

4.3 Limitation of End-to-End Encryption. The Service does not employ end-to-end encryption. During the processing of each request, the Service decrypts your content in memory to assemble conversation context and generate a response, and does not otherwise access, read, or retain your communications in readable form. The information necessary to generate a response is transmitted to OpenRouter with Zero Data Retention (ZDR) enabled by default: ZDR restricts routing to provider endpoints that process prompts and completions ephemerally, such that content is not stored, logged, or used for training and is discarded immediately after the response is generated, other than transient in-memory caching of repeated prompt prefixes for performance. Request metadata, including token counts, timing, and cost, is retained by OpenRouter for billing and reporting purposes. Certain features may rely on providers or models that do not support ZDR; such features are clearly indicated in the Service at the time they are used, and the associated content is processed in accordance with the applicable provider's retention and safety policies.

4.4 No Security Guarantee. While Pulzer employs the security measures described in this Section 4, no method of transmission over the Internet or method of electronic storage is completely secure. Pulzer cannot guarantee the absolute security of your information.

5. Disclosure to Third Parties

Pulzer discloses information as follows:

• to third-party artificial intelligence providers, including OpenRouter, as necessary to generate responses to your prompts, as described in Section 4.3;
• to advertising partners, including Gravity (TryGravity.ai), for the purpose of serving contextual advertisements, as described in Section 7;
• to hosting and database providers, which store encrypted content on behalf of Pulzer;
• when required by law, regulation, legal process, or governmental request;
• when Pulzer believes in good faith that disclosure is necessary to protect the rights, property, or safety of Pulzer, its users, or the public; and
• in connection with a merger, acquisition, reorganization, or sale of all or a portion of the assets of Pulzer.

6. Geographic Database

The offline geographic database referenced in Section 2.2 resides on the servers of Pulzer, and no information is transmitted to the provider of that database in connection with such lookups.

7. Advertising

The Service is provided free of charge and is supported by the display of advertisements. Advertisements are contextual in nature: they are selected based on the content of your recent messages, including your most recent prompt, and are not selected based on your identity. Pulzer does not sell your personal information, does not create advertising profiles, and does not permit advertisers to track your activity across third-party websites. Advertisements are served by Gravity (TryGravity.ai), a third-party advertising network, pursuant to its own privacy policy.

8. Retention and Deletion

Except as described below, Pulzer does not currently apply any automatic deletion or expiration period to information collected in connection with the Service; your information is retained indefinitely until affirmatively deleted. You may delete individual conversations and memory entries through the interfaces of the Service. You may delete your account at any time through the settings of the Service, whereupon your user content and account information will be deleted from the Service, subject to the survival of anonymized analytics and audit records that no longer identify you. Disabling a memory category does not delete the underlying information but removes such information from the context made available to third-party artificial intelligence providers until such information is affirmatively deleted by you.

9. Your Rights and Choices

Subject to applicable law, you may access, correct, export, and delete your information through the interfaces of the Service or by contacting Pulzer at the address set forth in Section 12. You may decline to provide certain information, although such declination may affect your ability to use the Service.

10. Children's Privacy

The Service is not directed to children under the age of thirteen (13). If you believe that a child under the age of thirteen (13) has created an account on the Service, please contact Pulzer at the address set forth in Section 12, and Pulzer will take steps to remove the account and any associated information.

11. Changes to This Policy

Pulzer may update this Policy from time to time. When Pulzer makes material changes, Pulzer will update the "Last updated" date at the top of this Policy and post the revised Policy at this URL. Your continued use of the Service following the posting of a revised Policy constitutes your acceptance of the revised Policy.

12. Contact Information

Questions or concerns regarding this Policy or the processing of your information may be directed to Ashuza LLC, the operator of the Service, at 2505 Balsam Dr, Rowlett, TX 75089, or by email at: [email protected].