Pulsed Media Privacy Policy

General description of privacy policy

Pulsed Media privacy policy is quite simple:

• Protecting customer privacy is of utmost importance
• Customer data is customer's data: No "peeking", logging, or otherwise checking customer data contents without a strong reason (administrative, or technical).
• Abide by Finnish and EU laws relating to customer privacy, customer data. Including retention and protection policies of Finnish & European laws.
• We will not retain customer data information (what is stored in the service by customer).
• Cooperate with authorities only as required and permitted by the Finnish law.

These privacy policies may change from time to time without separate notice. You can see history of the changes on this page.

General philosophy of privacy

Here at Pulsed Media customer privacy is very highly respected and protected. The main philosophy is that customer data and information is theirs, not ours and we do not even want to know of what is stored, or any other information which is considered private unless we are required to. We consider data you store to our servers to be your private information, and looking into that would be like looking at your home computer hard drive: Not our business! .

We are required to gather certain details, and retain those details of all customers however, commonly for accounting and tax purposes (Country, name, mailing address).

Cookies

For some features cookies are a must, but their usage has been minimized to the bare essential requirements such as user sessions and other security related things. Without these, for example billing, would not be accessible. Some sections of our services use 3rd party site analytics and these entail some cookies, these are considered essential.

E-Mail Retention

Emails from our billing system are retained for 3 years maximum and emails older than 3 years are automatically cleaned from the production billing database.

AI agents and outside model providers

Our support uses AI agents. Your tickets, and what an agent reads while working on one, are processed by AI language models run by outside API providers.

We do our best to keep it private. But we have no way of knowing what those providers actually keep or log, or whether they follow the EU GDPR properly. All we have is the public information they publish about their APIs. We cannot audit them.

So consider what you are willing to risk with an agent. Do not give it passwords, keys or anything you would not want a third party to store. Where a setup needs a secret, the agent leaves the spot ready and tells you where to put it yourself.

AI credits (Virsilipas)

When you use your AI credits, the outside provider that runs the model does not learn who you are. Our credit service, Virsilipas, sends each request on with Pulsed Media's own account and from our own server. It passes on no name, account, IP address or key of yours, and every customer's requests reach the provider under that same account. What your app writes into the request itself, the prompt included, does reach the provider.

The credit service never stores or logs the text of your prompts or answers. For each request it records counts: tokens, credits, the model, the status and the timing. These are kept with your account, so we can show you your use and take the credits it cost.

What the section above says about outside providers applies here too: we cannot audit what they keep, so leave passwords, keys and personal details out of your prompts.

Feedback you send us

With /feedback in Pikkumies, our AI helper, you can show us exactly what went wrong: your message and the conversation that led to it, locked so only we can open it.

• Pikkumies sends feedback only when you ask for it: you type /feedback, ask for it in your own words, or say yes when Pikkumies asks whether you want to send some (it asks that only if you turned feedback.ask on). It shows you how big the draft is, whether your conversation is in it and how your text starts. Before the send, a safety check compares it with what you asked in your own messages; the agent cannot clear that check for you. The check is a safety step, not a lock: an agent misled by something it reads could find another way to send, just as it could send your files anywhere else.
• What is sent: your message, your conversation with the agent unless you leave it out, the AI model, provider and folder that conversation used, and the version numbers of Pikkumies, Hermes and PMSS. It is linked to your account through your AI credits key. Pikkumies removes common forms of passwords and keys before it saves the draft, but it cannot catch every form, so read the draft before you send it. The draft stays on your machine.
• It is locked on your machine with our public key before it leaves. The server that receives it cannot read it; only Pulsed Media can.
• We keep it until you ask us to delete it. Each send gets an id: quote it in a support ticket and we delete that feedback and our working copies. Copies already in our backups stay there, still locked, for as long as those backups are kept.
• Pulsed Media and our support AI agents read it the same way as tickets, so the section above applies. We use it to fix problems and improve Pikkumies. Apart from that AI processing and what Finnish law requires of us, we do not sell it or share it with anyone.
• Session rating, only if you turn it on. With the setting feedback.ask on, Pikkumies may ask you to rate a session from 1 to 3 when you close it after at least 45 minutes and 500,000 tokens. Typing a number sends only that number, the session's length rounded to five minutes, its token count rounded to the nearest 100,000, the AI model's name and the version numbers of Pikkumies, Hermes and PMSS. No conversation is sent. It is locked with our public key like the rest of your feedback and linked to your account through your AI credits key. Any other answer sends nothing, and n turns these questions off. No id is shown for a rating: to have your ratings deleted, ask in a support ticket.

On a Pulsed Media seedbox, Pikkumies can also open a support ticket by itself when it is stuck on a problem it cannot solve. That ticket carries what it tried, why it is stuck, this account's logs and system details and the conversation, with long key-like strings removed, and it says you have not seen it. We read it like any other ticket, so what the AI agents section says applies. It opens at most two such tickets a day; to turn this off, run pikkumies configure and ask it to turn automatic tickets off. Anywhere else it does this only if you turn it on.

The /debug command that comes with Hermes is different: it uploads system information and recent log lines, which can include parts of your conversations, to a public paste site, where anyone with the link can read them. For anything private, use /feedback, or /debug local to see the report without uploading it.