Transparency for a broadcasting platform.

1. Who We Are

PulsCast (“the service”) is operated by Impulsradio Africa (“Impulsradio”, “we”, “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our marketing pages, operate a channel, listen through public experiences, manage billing, or interact with support.

By using the service, you acknowledge that you have read this policy. Where local law requires separate consent, we will present additional controls when applicable.

2. Information We Collect

Account data: name, email address, avatar, password hashes, two-factor/authentication security data, session identifiers, device or browser hints, audit logs, and timestamps of security events.

Station data: channel name, descriptions, genres, routes/slugs, logos, stream keys or ingest settings (stored under access controls), scheduling rows, playlist structures, automation rules, upload metadata, and configuration toggles (including privacy/ImPass settings where enabled).

Billing data: plan tier, subscription status, Paystack customer and subscription identifiers, invoice references, and coarse payment outcomes. Full payment card numbers are processed by Paystack; we do not receive complete card PANs on our own servers.

Listener and analytics data: session identifiers, approximate geography (country/city when available), player diagnostics, concurrency counts, watch duration estimates, referrer headers, and aggregated metrics used to power dashboards or globe visualizations.

Support data: messages you send through Help, email headers, attachments you voluntarily provide, and internal notes necessary to resolve issues.

Cookies and storage: authentication cookies, CSRF or security tokens, theme preferences in local storage, and similar technologies required for basic operation.

3. How We Use Personal Information

Provide and secure the service: authenticate you, authorize API actions, encode or route streams, run playout automation, enforce plan limits, monitor abuse, and deliver notifications critical to operations.

Bill and administer accounts: calculate entitlements, sync subscription state from Paystack webhooks, prevent fraud, issue receipts through Paystack’s systems, and respond to billing inquiries.

Improve reliability: troubleshoot defects, analyze aggregated usage trends, and plan capacity. Where feasible we use de-identified or aggregated datasets for analytics.

Comply with law: respond to lawful requests, enforce our Terms, protect rights and safety, and defend legal claims.

Market measured improvements: with consent where required, we may mention product milestones on social channels or newsletters; operational emails (billing, security alerts) may be sent without marketing consent when necessary.

4. Legal Bases (EEA / UK / ZA Context)

Depending on your location, we rely on contractual necessity (to deliver the service you request), legitimate interests (for example platform security, fraud prevention, product improvement, and internal reporting balanced against your rights), legal obligations, and, where required, consent.

Where Processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal, except where another legal basis still applies.

5. Sharing, Processors, And Disclosure

We share personal information with vendors who process it on our instructions, including cloud hosting, database providers, email delivery, logging/monitoring, Paystack for payments, Turnstile or similar bot defenses when enabled, and transactional analytics.

We may disclose information if required by law, regulation, subpoena, or court order, or if we reasonably believe disclosure is necessary to protect Impulsradio, our users, or the public.

If we engage in a merger, acquisition, asset sale, or restructuring, personal information may transfer as a business asset; we will require the successor to honor this policy or inform you of material changes.

We do not sell personal information for money. We do not allow subprocessors to use your personal data for their independent marketing without appropriate safeguards.

6. International Transfers

Our infrastructure or subprocessors may be located outside your country. Where transfers require safeguards (for example Standard Contractual Clauses or equivalent mechanisms), we implement reasonable measures consistent with applicable law.

7. Retention

We retain account and station configuration data while your relationship is active and for a reasonable period thereafter for backups, audits, or dispute resolution.

Listener analytics and history are retained for plan-defined windows (for example a maximum number of days tied to your entitlement tier) unless a longer period is legally required.

Trash or soft-deleted records may remain recoverable for a limited window before permanent deletion. Security logs may be kept longer when necessary to detect abuse or satisfy forensic requirements.

8. Security

We implement administrative, technical, and organizational controls including access restrictions, encryption in transit where supported, rate limiting, auditing, and dependency monitoring. No system is perfectly secure; you should protect credentials and alert us to suspected compromise immediately.

9. Your Rights And Choices

Subject to law, you may request access, correction, deletion, restriction, portability, or objection to certain processing, and you may lodge a complaint with your supervisory authority.

Many controls are self-service (profile, station branding, session revocation). We may decline requests that jeopardize others’ rights, are impractical, or conflict with legal retention duties.

10. Children

The service is not directed at children under 13. If you believe we collected child data inadvertently, contact us so we can delete it where required.

11. Automated Tools And Future Features

Where optional AI or automation features analyze station data to generate recommendations, such processing builds on the same account and station information described above. We configure tools to avoid unnecessary retention beyond operational needs, but you remain responsible for reviewing outputs before publishing them to audiences.

12. Updates

We may update this Privacy Policy to reflect product, legal, or regulatory changes. The “Last updated” date at the top will change when revisions are posted, and continued use after the new effective date constitutes acceptance unless applicable law requires otherwise.