Legal
Privacy Policy
Last updated 3 August 2026
CAP holds your clients’ unreleased campaign work. This page says plainly what we collect, why, and who else touches it.
Who is responsible
CAP is operated by Imad Ud Din Faisal, trading as SellerPulse, an individual resident in the Kingdom of Saudi Arabia. For questions about your data, email support@getsellerpulse.com.
Two different roles
This distinction matters, because most of the personal data in CAP is not ours — it is your clients’.
- For your own account data — your email, agency name and phone number — we decide how it is used. We are the controller.
- For everything you put into CAP about your clients — their names, companies, phone numbers, the content you upload and the approvals they give — you decide, and we only process it to run the service for you. You are the controller; we are your processor.
So if a client of yours asks to see or delete their data, you handle that request, and we will help you do it.
What we collect
- Account — email address, password (stored only as a hash, never in readable form), agency name, optional WhatsApp number.
- Client records you create — contact name, business name, WhatsApp number.
- Content you upload — captions, images, external links, platform and scheduled date.
- Approval history — every submission, approval, change request and resubmission, with the name the reviewer typed, any comment they left, and the time.
- Technical logs — standard server and security logs kept by our hosting providers, including IP addresses.
We do not run advertising or analytics trackers, and we do not sell or share your data for marketing.
People who review your content
Your clients do not have accounts. When someone opens a review link they are not asked to register. We record the name they type, their decision, any comment, and the time — that record is the point of the product.
We do not verify a reviewer’s identity, and we never contact them. Nothing is sent to your client by CAP.
Why we use it
- To provide the service you signed up for — this is the performance of our contract with you.
- To keep the service secure and prevent abuse — our legitimate interest.
- To take payment and meet tax and accounting obligations — legal obligation, via our payment provider.
- To email you about your account, such as password resets. Marketing email only if you asked for it, and you can stop it at any time.
Who else processes it
We keep the list short on purpose. These are the only companies that handle data on our behalf:
| Provider | What they do |
|---|---|
| Supabase | Database, authentication and file storage |
| Vercel | Application hosting and delivery |
| Paddle | Payments, invoicing and tax, as merchant of record |
| Resend | Transactional email (password resets, account email) |
We will update this page before adding another processor. We do not otherwise disclose your data, except where we are legally required to.
Where it is stored
CAP runs on infrastructure operated by Supabase and Vercel. Your data may be stored and processed outside the country you live in, including outside the UAE. Where that happens, we rely on our providers’ standard contractual protections.
How it is protected
- Traffic is encrypted in transit.
- Agency data is isolated at the database level — one account cannot read another account’s clients, projects or approval history.
- Uploaded images sit in a private store and are served only through short-lived signed links generated for the person viewing them.
- Passwords are stored only as hashes and are never visible to us.
No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.
How long we keep it
Account and project data is kept while your account is open. Delete your account and it is removed, along with your clients, projects, content and approval history — review links stop working immediately. Backups roll off within 30 days.
Records we must keep for tax or accounting reasons are retained by our payment provider for as long as the law requires.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email support@getsellerpulse.com and we will respond within 30 days. If we cannot do what you ask, we will explain why.
Cookies
CAP sets cookies only to keep you signed in and to keep sign-in secure. There are no advertising, analytics or tracking cookies, which is why you are not being asked to dismiss a banner.
Changes
If we make a material change to this policy we will tell you by email or in the app before it takes effect. The date at the top always shows the current version.