Privacy Policy
Last updated: February 26, 2026
At Pulzo, we take privacy seriously. This policy describes what information we collect, how we use it, and what your rights are.
1. Information we collect
Account data
Name, last name, email, and password (stored with bcrypt hash). Also your language preference.
Social connection data
Access tokens for Instagram and WhatsApp (encrypted with AES-256), Instagram/WhatsApp account IDs, and associated usernames.
Seller's customer data
Name, phone number, email, address, and purchase history of customers who interact with your bot.
Conversations and messages
Text content of conversations, shared multimedia files, and audio transcriptions.
Payment data
Amount, method, and transaction status. We do not store credit card data — MercadoPago handles it directly.
AI usage data
AI model used, tokens consumed, and associated costs for each interaction.
Activity logs
Actions performed on the platform, IP address, and timestamps.
2. How we use the information
- Provide and improve the Pulzo service
- Process customer messages with AI (OpenAI and Google Gemini)
- Transcribe audio messages (OpenAI Whisper)
- Process payments through MercadoPago
- Analyze platform usage and performance
- Send notifications related to your account and conversations
3. Third-party services
Pulzo uses the following external services to operate:
- Meta (Instagram/WhatsApp): sending and receiving messages through their official APIs.
- OpenAI: AI chat processing, text-to-speech generation (TTS), and audio transcription (Whisper).
- Google Gemini: AI chat processing as an alternative to OpenAI.
- MercadoPago: payment processing and payment link generation.
4. Security
We implement the following security measures to protect your data:
- Social media access tokens encrypted with AES-256
- Passwords stored with bcrypt hash
- All communication is done through HTTPS
- Data isolation per seller account
5. Retention and deletion
Your data is retained while your account is active. When you delete your account, all associated data is deleted in cascade, including conversations, products, customers, settings, and access tokens.
6. User rights
You have the right to:
- Access your personal data
- Rectify incorrect information
- Request deletion of your account and all your data
- Export your data in a portable format
7. Cookies and sessions
Pulzo only uses essential cookies for the service to function:
- Session cookie (expires in 120 minutes)
- CSRF token for attack protection
We do not use third-party tracking cookies, Google Analytics, or tracking pixels.
8. AI and transparency
Pulzo uses artificial intelligence to serve sellers' customers. It's important to know:
- The bot identifies itself as AI, not as a human
- Customer messages and the product catalog are sent to AI providers to generate responses
- Customer personal data (email, phone, address) is not sent to AI providers
- The seller can monitor and take control of any conversation at any time
9. Contact
For privacy inquiries, write to us at [email protected].