Privacy Policy

This policy describes how PayPulss (hereinafter “we”, “the service”), published by Alkarizmia, processes personal data in connection with the online software for invoice tracking and payment reminders for freelancers and independents.

Data controller: Alkarizmia, Rue des Anciens Étangs 55 bte 1, 1190 Forest, Belgique (BCE/KBO 1037.806.166). For any question about personal data: contact@paypulss.com.

Additional contact details
Founder: El Fahmi Bilal
Legal responsible person: Ikram El Fahmi

Temporary provision: waitlist
While the product is not open to the public, access to the dashboard and sign-up may be closed in production. On the site, you can only leave your email address to be notified of the launch. This provision applies only during that period; it will be removed or updated when the service opens.

A legal review remains recommended before any strong contractual commitment or large-scale sensitive processing.

1. Data collected

We may process in particular:

• Waitlist (current period): email address, sign-up date, interface language, and attribution source (e.g. a ?src= parameter from a video, or form placement). No password is requested for this sign-up. No email is sent automatically at the time of sign-up.
• Account data: email address, password (hashed by our authentication provider), technical identifier, language preferences where applicable, when product registration is open.
• Data you enter in the service: client names or business names, invoice amounts and dates, statuses (paid / unpaid), reminder settings, email addresses used for reminders, attachments or labels you add voluntarily.
• Technical data: limited logs (errors, security), IP address, browser type, depending on the host and tools configuration, to the extent they are enabled and proportionate.

2. Waitlist: purpose, retention, and rights

During the period before the public opening of PayPulss, the email provided via the “waitlist” form is processed solely to:

• notify you when the service opens (one launch message, without a recurring commercial newsletter under this provision);
• store the registration in our database (Supabase), with useful technical metadata (language, source, date).

Legal basis: your consent (voluntary form submission). Unsubscribe: you may request removal of your email at any time by writing to contact@paypulss.com, or by replying to the launch email when it is sent.

Retention: the email is kept until the launch announcement is sent (or until your erasure request), then deleted or anonymized within a reasonable time, unless you later create a user account.

Sending the announcement: when the product opens, the publication email may be sent via our transactional email provider Resend, from addresses stored in Supabase. No automatic send is triggered at the time of waitlist sign-up.

3. Purposes and legal bases (GDPR)

• Waitlist / launch notice (consent): see section 2, for as long as this provision is in force.
• Providing and securing the service (performance of the contract / pre-contractual measures; legitimate interest for security): authentication, storage of your business data, isolation between accounts, abuse prevention.
• Reminders and email notifications (performance of the contract; when you configure reminders to your own clients, you remain responsible for complying with applicable law for communications sent from your account).
• Billing and subscription management (performance of the contract): when subscription monetization is enabled via a payment provider (e.g. Stripe), data needed for payment will be processed by that provider under its own policy.
• Legal obligations: retention or disclosure of data where the law requires it.
• Prospecting or newsletters: only if you set up a separate mechanism with explicit consent; to date the service may operate without prospecting.

4. Processors and hosting

We use technical providers consistent with industry practice. For information (list to be updated according to your actual deployment):

• Supabase: database hosting (including the waitlist table), authentication, storage associated with the product.
• Site and API host (e.g. Vercel or equivalent): delivery of the web application.
• Payment provider: when Stripe (or equivalent) is integrated for subscriptions, payment data will be processed by that provider; we do not store your full card numbers on our own application servers.
• Transactional email provider (Resend): sending the launch announcement to waitlist subscribers and, once the product is open, sending reminders configured in the service. Metadata needed for sending (recipient, message content) transit through this provider.
• Integrations and exports: if you use webhooks or exports to your own systems or providers, those flows fall under your configuration and those third parties’ terms.

5. Transfers outside the European Union

Some providers may be established or host data outside the European Economic Area. Where applicable, we rely on mechanisms recognized by the regulation (standard contractual clauses, supplementary measures if needed), to the extent our providers offer them. Details may vary by the processors actually used; keep this section up to date.

6. Retention periods

• Waitlist: until the launch announcement or until your erasure request (see section 2).
• Account and business data: kept while your account is active, then deletion or anonymization within reasonable periods after account closure, unless a longer legal retention obligation applies.
• Technical logs: short periods proportionate to security and diagnostic needs.

7. Your rights

Subject to the conditions set out in the GDPR, you have rights of access, rectification, erasure, restriction of processing, objection (including to processing based on legitimate interest where the law allows), and portability where processing is based on consent or contract and is automated.

You may exercise your rights by writing to contact@paypulss.com. Complaint to the Data Protection Authority (Belgium): www.autoriteprotectiondonnees.be.

8. Cookies and trackers

The application uses cookies or local storage that are strictly necessary for operation (for example authentication session, language preferences, cookie consent choice). These are essential or purely technical; they do not require prior consent under applicable regulation.

Audience measurement (optional): if you accept via the cookie banner, we enable Google Analytics 4 (Google Ireland Ltd / Google LLC), measurement ID G-JJ2FRKBE3L. Purpose: site traffic statistics (page views, approximate provenance), to improve the service. Legal basis: your consent. You may refuse or change your choice by clearing the site’s local storage (key paypulss_cookie_consent) and reloading the page. No targeted advertising is enabled via this tool on PayPulss.

Until you refuse or have not chosen, Google analytics cookies are not set (Consent Mode: analytics storage denied by default). A refusal does not prevent browsing the site.

For more information on Google Analytics: policies.google.com/privacy.

9. Security

We implement technical and organizational measures consistent with common industry practice (authentication, access control, encryption in transit via HTTPS, database access policies). No system is guaranteed free of risk; report vulnerabilities to: contact@paypulss.com.