Privacy Policy

cpulze is a trading name of Nuwayz Systems Ltd, a company registered in England and Wales. This Privacy Policy explains how we collect, use, store and protect your personal data when you use cpulze.com and the cpulze AI narrative scanning service.

1. Who we are

Nuwayz Systems Ltd is the data controller for all personal data collected through cpulze.com. We are registered in England and Wales.

• Trading name: cpulze
• Legal entity: Nuwayz Systems Ltd
• Contact email: pulse@cpulze.com
• Website: cpulze.com

2. What data we collect

When you submit a free scan

• Your email address
• Your hotel or property name
• Your property location (city, state or country)
• The date and time of your scan request
• Your IP address (collected automatically for security and rate limiting)

When you subscribe to Intelligence + Ledger

• All data from free scan submissions
• Billing information (processed and stored by Stripe — we do not store card details)
• Ledger entries you create about your property
• Scan history and findings associated with your account

Data we do not collect

• We do not collect data from guests or reviewers
• We do not track your browsing activity across other websites
• We do not use advertising cookies or tracking pixels
• We do not sell your data to any third party

3. How we use your data

We use your data solely to operate the cpulze service:

• To run an AI narrative scan for your property using Perplexity AI
• To deliver your scan report to your email address via Brevo
• To track your scan usage against the 5 lifetime free scan limit
• To send you the scan limit notification email when your free scans are used
• To manage your subscription if you become a paying customer
• To respond to support queries you send us directly

We do not use your data for marketing without your explicit consent. We do not send unsolicited emails beyond the scan report and limit notification that are part of the service you requested.

4. Legal basis for processing

Under UK GDPR, we process your personal data on the following legal bases:

• Contract performance — processing your email and property details to deliver the scan service you requested
• Legitimate interests — maintaining security logs, rate limiting to prevent abuse, and improving the service
• Legal obligation — retaining transaction records for tax and accounting purposes

5. Data retention

We retain your data for the following periods:

• Free tier users — scan data retained for 90 days from your last scan
• Paying subscribers — account and scan data retained for the duration of your subscription plus 2 years after cancellation
• Billing records — retained for 7 years as required by UK tax law
• Security logs — retained for 30 days

After the applicable retention period your data is permanently deleted from our systems and from our third-party processors upon request.

6. Third parties we use

We use the following third-party services to operate cpulze. Each has their own privacy policy and data processing agreements where required:

• Perplexity AI — runs the AI narrative scan. Your hotel name and location are sent to Perplexity to generate search results. No personal data beyond property details is shared.
• Anthropic (Claude) — processes scan results to generate your report. Hotel scan data is sent to Claude for formatting.
• Brevo (Sendinblue) — delivers scan report emails to your email address. Brevo is EU-based and GDPR compliant.
• Supabase — stores your scan records and account data securely in a hosted database.
• Vercel — hosts the cpulze.com website. Your IP address is processed by Vercel's CDN infrastructure.
• Stripe — processes subscription payments for paying customers. Card data is stored by Stripe, not by cpulze.
• Cloudflare — provides bot protection on our scan form. Cloudflare's Turnstile service processes a request score without storing personal data.

7. Your rights under UK GDPR

As a data subject you have the following rights:

• Right of access — request a copy of all personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data (subject to legal retention obligations)
• Right to restriction — request we limit processing of your data
• Right to portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, email us at pulse@cpulze.com. We will respond within 30 days.

8. Cookies

cpulze.com uses minimal cookies necessary to operate the website. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that track individual behaviour across sessions.

The only cookies set are functional cookies required for the security verification on our scan form (Cloudflare Turnstile). These do not contain personal data and are not used for tracking.

9. Data security

We take the security of your data seriously. Our security measures include:

• HTTPS encryption on all pages and data transfers
• Row-level security on all database tables
• API keys and secrets stored in encrypted environment variables — never in source code
• Rate limiting and bot protection on all form submissions
• Webhook authentication on all automated workflow endpoints

10. International data transfers

Some of our third-party processors are based outside the UK and EEA. Where data is transferred internationally we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required under UK GDPR.

11. Children's data

cpulze is a business-to-business service intended for hotel owners and property operators. We do not knowingly collect data from anyone under 18 years of age. If you believe we have inadvertently collected data from a minor please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do we will update the "last updated" date at the top of this page. Material changes will be communicated to active subscribers by email.

13. Complaints

If you have concerns about how we handle your personal data you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.