Effective date: 19 July 2026

Pulseqo is a workplace communication and emergency-alert service provided by FLYONIT. This policy explains how Pulseqo handles information when an organisation, its administrators, or its employees use the Pulseqo website, mobile application, email, SMS, voice, push-notification, Microsoft directory, or Microsoft Teams features.

Who controls your information

The organisation that provides your Pulseqo account controls employee account and workplace-alert information. Pulseqo processes that information for the organisation and also controls the limited account, security, support, and service-operation information needed to operate Pulseqo. Questions can be sent to support@pulseqo.com.

Information we collect

• Account and contact information: Name, work email address, telephone number, organisation, role, account identifiers, verification status, and preferences.
• Authentication and security information: Password hashes, authentication tokens, two-factor settings, Microsoft sign-in identifiers, sign-in timestamps, IP address, device type, and security events.
• Device and notification information: Firebase installation and push-notification tokens, notification permission and delivery status, and app version.
• Workplace communications: Alert content, recipients, delivery results, acknowledgements, responses, schedules, groups, and administrator actions.
• Support and privacy requests: Messages, attachments supplied to support, deletion reasons, request status, and correspondence.
• Service and diagnostic information: Request logs, error information, timestamps, and technical data used to secure and maintain the service.

Pulseqo does not request mobile access to location, contacts, photos, camera, microphone, SMS, or call logs. Face ID, Touch ID, fingerprint, face unlock, and device-passcode checks are performed by the device operating system; Pulseqo does not receive or store biometric templates.

How we use information

• Authenticate users, maintain accounts, and provide organisation-controlled access.
• Create, send, deliver, display, and record workplace and emergency alerts.
• Send push notifications, email, SMS, voice calls, and Microsoft Teams messages selected by an administrator.
• Protect accounts, prevent abuse, investigate incidents, troubleshoot failures, and maintain service reliability.
• Respond to support, privacy, access, correction, and deletion requests.
• Meet contractual, workplace-safety, audit, regulatory, and legal obligations.

Pulseqo does not sell personal information and does not use account or alert information for third-party advertising or cross-app tracking.

Service providers and disclosures

Information is disclosed only as needed to the organisation that manages the account, authorised Pulseqo support personnel, and service providers that operate Pulseqo. Depending on enabled features, these providers include Microsoft Azure and Microsoft Teams, Google Firebase Cloud Messaging, Apple Push Notification service, cloud hosting and storage providers, and contracted email, SMS, and voice-delivery providers. Information may also be disclosed where required by law, to protect people or the service, or as part of a business transfer subject to equivalent safeguards.

Storage, international transfers, and security

Pulseqo uses access controls, encryption in transit, restricted administrative access, token expiry, and monitoring designed to protect information. Providers may process information in Australia, the United States, or other countries where they operate. Pulseqo requires providers to protect information consistently with applicable contracts and privacy law. No online service can guarantee absolute security.

Retention and deletion

• Active account and device-token information is retained while the account is active.
• Authenticated account-deletion requests are processed within 30 days. Profile, contact, authentication, device-token, directory-link, and support-access data is deleted or anonymised and the user is notified when processing completes.
• Deleted data may remain in encrypted backups for up to 90 days before routine expiry.
• Security and diagnostic logs are normally retained for up to 12 months.
• Delivery, acknowledgement, consent, administrator-audit, billing, and workplace-safety records may be retained by the account organisation or Pulseqo when required for safety, fraud prevention, contractual, regulatory, dispute, or legal obligations. Access is restricted and the records are deleted or anonymised when no longer required.

Your choices and rights

You can update supported profile fields and notification preferences in the app. You can request access, correction, or deletion through your organisation administrator or Pulseqo support. Account deletion can be initiated in the mobile app under Settings or at https://pulseqo.com/delete-account without reinstalling the app. You may also change mobile notification and biometric permissions in device settings.

Children

Pulseqo is a business and workplace service and is not directed to children.

Changes and contact

Material changes will be published on this page with a revised effective date. Contact support@pulseqo.com or write to Unit 5/40C Wallace Ave, Point Cook, VIC 3030, Australia with privacy questions or complaints.