RecoPulse Privacy Policy
Last updated: 22 October 2026
This policy explains what personal data RecoPulse collects, why, who we share it with, and what rights you have. We've tried to write it in plain language.
1. Who we are
RecoPulse is operated by UAB „LT projektų grupė“, company code 304142224, registered at V. Nagevičiaus g. 3, Vilnius, Lithuania ("RecoPulse", "we", "us").
We are the data controller for the personal data described here. Contact us about privacy at hello@recopulse.io.
2. What RecoPulse does
RecoPulse checks how AI assistants (such as ChatGPT, Claude, Gemini and Perplexity) describe and recommend businesses. To do that, we send customer-style questions about a business to these AI services and analyse their answers.
The questions we send to AI services contain business information only: the business name, website address, industry, city, and text from the business's public website. We never send your email address or other personal account details to AI services.
3. What data we collect and why
3.1 Free AI check (no account)
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Website address you enter | To run the check | Performing the service you requested (Art. 6(1)(b)) |
| Your email address | To link the check to you and pre-fill sign-up if you create an account | Performing the service you requested (Art. 6(1)(b)) |
| Your IP address | To limit how many free checks can be run per day and prevent abuse | Our legitimate interest in keeping the service secure and affordable (Art. 6(1)(f)) |
| Check results (AI answers about the business) | To show you the result | Performing the service you requested (Art. 6(1)(b)) |
Results are viewable by link. Each free check gets a long, unguessable link. Anyone you share that link with can view the result, which shows the business information and the AI answers but never your email address. If the same website was checked recently, we may show a stored result instead of running a new check.
3.2 Account
| Data | Why we use it | Legal basis |
|---|---|---|
| Email address and password | To create and secure your account. Passwords are stored by our authentication provider in hashed form; we never see them. | Contract (Art. 6(1)(b)) |
| Businesses you add and their audit reports | To provide the reports and track changes over time | Contract (Art. 6(1)(b)) |
| Language preference | To show the service in your language | Contract (Art. 6(1)(b)) |
3.3 Payments
When you buy a subscription, payments are processed by Stripe. We receive your name, billing details, subscription status and the last four digits of your card. We never receive or store your full card number. We keep invoices because the law requires it.
Legal basis: contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).
3.4 Analytics (only with your consent)
If you accept analytics cookies, we use Google Analytics to understand how visitors use the website (e.g. which pages are visited). It is not loaded at all unless you accept. You can change your choice at any time via "Cookie settings" in the footer.
Legal basis: consent (Art. 6(1)(a)). See our Cookie Policy.
3.5 When you contact us
If you email us, we use your email address and message to reply. Legal basis: legitimate interest (Art. 6(1)(f)).
We do not sell your data, and we do not send marketing emails.
4. Who we share data with
We use trusted service providers ("processors") who process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Google Cloud / Firebase (Google Ireland Ltd.) | Hosting, database, account sign-in, server functions | Database and server functions in the EU. Sign-in data may be processed in the US. |
| OpenAI | AI answers (ChatGPT): business information only | US |
| Anthropic | AI answers (Claude) and analysis of results: business information only | US |
| Google (Gemini) | AI answers in full audits: business information only | US / global |
| Perplexity AI | AI answers in full audits: business information only | US |
| Google Analytics | Website analytics, only with consent | US / global |
| Hostinger (Hostinger operations, UAB) | Sending service emails (e.g. weekly reports to subscribers) | EU (Lithuania) |
| Stripe | Payments | EU / US |
We may also disclose data if required by law, or to protect our rights in a legal dispute.
5. Transfers outside the EU
Some providers above are based in the US. Where personal data is transferred outside the EU/EEA, we rely on the EU–US Data Privacy Framework (where the provider is certified) or the European Commission's Standard Contractual Clauses.
6. How long we keep data
| Data | How long |
|---|---|
| IP address records for rate limiting | About 2 days |
| Free check (email + result) | 12 months from the check, or until you ask us to delete it |
| Account data and reports | Until you delete your account. Deletion is immediate and permanent, using "Delete account" in Settings. |
| Invoices and accounting records | 10 years, as required by Lithuanian accounting law |
| Emails you send us | Up to 2 years after our conversation ends |
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data (you can delete your account yourself in Settings);
- restrict or object to certain processing, including processing based on our legitimate interest;
- data portability: receive your data in a machine-readable format;
- withdraw consent at any time (e.g. for analytics), without affecting earlier processing.
To use these rights, email hello@recopulse.io. We'll reply within one month.
You can also complain to the Lithuanian data protection authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), or to the authority in your EU country.
8. Security
We use encrypted connections (HTTPS), access controls that let each user see only their own data, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.
9. Children
RecoPulse is a business tool and is not intended for anyone under 16. We do not knowingly collect children's data.
10. Changes to this policy
If we change this policy, we'll update the date at the top. If the changes are significant, we'll notify account holders by email or in the app.
11. Contact
UAB „LT projektų grupė“, V. Nagevičiaus g. 3, Vilnius, Lithuania Company code: 304142224 Email: hello@recopulse.io