Privacy Policy
1. An Overview of Data Protection
The following information provides an overview of what happens to your personal data when you use HAPulse. "Personal data" comprises all data that can be used to personally identify you. The party responsible for processing data on this website (the "controller") is the operator of HAPulse; the contact details are available in the Imprint.
2. Your Home Assistant Connection — Private by Design
HAPulse connects from your browser directly to your own Home Assistant instance. Your Home Assistant URL and access token are stored only in your browser and are never transmitted to or stored on our servers — this is true for both the self-hosted edition and the hosted plan. We never proxy, see, or store the data exchanged between your browser and your Home Assistant.
3. Hosting
We host this website and the hosted application with third-party providers (including Vercel for hosting and Supabase for authentication and database storage). Data is stored on their servers. This may include technical information such as IP addresses and access logs generated when you use the site. These providers process data on our behalf as processors under data-processing agreements.
4. Account Data and Settings Sync
When you create a hosted account, we store your email address and authentication data through Supabase (passwords are handled by Supabase and stored only as secure hashes; we never see your password in plain text). If you use the hosted plan, your dashboard customization (such as theme, layout, and the order or visibility of items) is stored in your account so it can sync across your devices. This customization data does not contain your Home Assistant token or credentials. The processing of account and settings data is based on Art. 6(1)(b) GDPR (performance of a contract) and our legitimate interest in providing the Service (Art. 6(1)(f) GDPR).
5. Payment Service Provider — Stripe
We offer the hosted subscription via Stripe. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. If you subscribe, the payment details you enter are transmitted to and processed by Stripe; we do not store your full payment-card details. We receive limited billing and subscription status information from Stripe to manage your subscription. This transfer is based on Art. 6(1)(b) GDPR (processing for the performance of a contract).
6. Server Logs
Our hosting providers automatically collect and store information that your browser transmits, such as browser type and version, operating system, referrer URL, and the time of access. This data is technically necessary to display the website correctly and to ensure stability and security. It is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
7. Data Retention
We retain account and settings data for as long as you maintain an account. You can delete your account or ask us to delete your data, after which it is removed unless we are required to retain it by mandatory statutory provisions (in particular retention periods).
8. Your Rights
You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can revoke it at any time for the future. You have the right to request restriction of processing under certain circumstances, the right to data portability, and the right to lodge a complaint with the competent supervisory authority.
9. Contact
If you have questions about privacy and data protection, please contact us using the details in our Imprint.