Privacy policy

1. Data controller

The data controller within the meaning of the GDPR is:
Christian Hamann, Hermann-Ehlers-Straße 12a, 27578 Bremerhaven, Germany
Email: support@nexpulse.de

2. Data collected and purposes

2.1 Customer portal (registration & login)

During registration we collect: your email address and a password of your choice (stored as a bcrypt hash). This data is processed to perform the contract (Art. 6(1)(b) GDPR) and to provide the customer portal.

2.2 License management

To activate your license we store the license key and the activation timestamp. All license data stays on our own server and is not shared with third parties, except where required to perform the contract.

2.3 Payment processing (Lemon Squeezy)

Payments are processed via Lemon Squeezy (Lemon Squeezy LLC, USA) as merchant of record. NexPulse does not receive complete payment data (credit card numbers, bank accounts). Lemon Squeezy is responsible for tax and payment compliance. Lemon Squeezy’s privacy policy is available at lemonsqueezy.com/privacy. Legal basis: Art. 6(1)(b) GDPR.

2.4 Email communication (Resend)

Transactional emails (license confirmation, password reset) are sent via Resend (Resend Inc., USA). Your email address is transmitted to Resend for this purpose. Legal basis: Art. 6(1)(b) GDPR.

2.5 Support tickets

When you submit a support ticket, we store the content of your message as well as any log excerpts you attach. This data is used solely to handle your request and is retained for 12 months after the ticket is closed. Legal basis: Art. 6(1)(b) GDPR.

2.6 Local app data

The NexPulse desktop app stores chat logs, statistics and settings exclusively on your local PC. This data is not transmitted to our servers unless you use the optional backup feature (in which case it is stored encrypted on your account).

2.7 Server logs

Our web server automatically logs IP address, timestamp and requested URL. These logs are deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and error analysis).

3. Cookies

We only use technically necessary cookies (a session cookie for login). We do not set analytics or marketing cookies. See our cookie policy for more information.

4. Data transfer to third countries

Lemon Squeezy and Resend are US-based providers. Transfers are based on the EU Commission's Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.

5. Retention period

Customer data (email, licenses) is stored for as long as a contractual relationship exists, and afterwards for the legally required retention period (typically 10 years for tax-relevant data). You may request deletion of your account at any time.

6. Your rights

You have the right to:

• Access (Art. 15 GDPR) the data we hold about you
• Rectification (Art. 16 GDPR) of inaccurate data
• Erasure (Art. 17 GDPR) of your data
• Restriction (Art. 18 GDPR) of processing
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR) to processing

To exercise your rights, contact: support@nexpulse.de

You also have the right to lodge a complaint with the competent supervisory authority. For Bremerhaven, this is: Der Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen.

7. Changes to this privacy policy

We reserve the right to update this privacy policy as needed. The current version is always available at nexpulse.de/datenschutz. The date of the last change is shown above.