Privacy Policy

1. What Data We Collect

PulseForge AI (exactbaseline.com) collects only the minimum information required to execute public GitHub repository telemetry scans and fulfill self-serve Repo Hardening & Launch Kit orders:

• Public Repository Metadata: When you scan a GitHub repository (owner/repo), we query public GitHub REST APIs for repository structure, stars, forks, and configuration files. We never access private repositories.
• Order & Fulfillment Details: When you purchase a $49 Repo Hardening & Launch Kit or $149 Category Leader Pro tier, we collect your work email address, target repository URL, and optional X/Twitter handle to deliver your 7-file hardening ZIP bundle and verified README shield.
• First-Party Telemetry & Cookies: We store your cookie consent preference and UI view state in localStorage, and log anonymized request telemetry (HTTP path, user-agent classification, and conversion events) to protect against abuse and measure platform health.

2. Why We Collect Data & Legal Basis

We process data strictly to: (a) generate deterministic 100-point benchmark scores and downloadable hardening configurations (`CLAUDE.md`, `litellm-router.yaml`, `pulseforge-ci.yml`), (b) process self-serve checkout transactions, and (c) enforce security rate limits and WAF protections.

3. Third-Party Data Processors

We do not sell, rent, or trade personal data. We rely only on industry-standard infrastructure processors:

• Stripe, Inc.: PCI-DSS Level 1 payment processing. PulseForge AI never sees or stores raw payment card numbers.
• Cloudflare, Inc.: Edge TLS termination, DDoS mitigation, and DNS routing.
• GitHub API: Public repository metadata lookup during on-demand scans.

4. Your Rights (GDPR & CCPA Compliance)

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you have the right to access, export, rectify, or permanently delete any personal data associated with your email address or repository submission, and to reject non-essential telemetry at any time via the Cookie Preferences control.

5. Data Retention & Contact Information

For data access, deletion requests, or privacy inquiries, contact our Data Protection Officer at privacy@exactbaseline.com. All verified deletion requests are completed within 72 hours.