Privacy policy

Pema Pulse is run by ARBNEXO L.L.C. ("ARBNEXO", "we"), Konstandin Kristoforidhi 11, 10000 Prishtinë, Kosovo. We are responsible for the data of website visitors and accounts. For the data a company enters into Pema Pulse, the company is responsible and we process it on its behalf. Contact: privacy@arbnexo.com.

• Website: no account, no analytics and no advertising trackers. Our servers keep short-lived technical logs (such as IP address and browser) for security.
• Demo requests: what you type into the form, to arrange and follow up on your demo.
• Accounts: your name, email address, password (stored only as a hash) and sign-in records, to run the service and keep your account secure.
• Company data: the structure, the people invited and the assessments a company enters, to run its assessments.
• Survey answers: stored without any link to the person who answered. Employers see only grouped results for groups large enough to keep people anonymous.
• Cookies: only the ones needed to sign you in, protect your changes and remember your language. There are no tracking cookies, so there is no cookie banner.

We use personal data to provide the service you or your employer signed up for (contract), to keep it secure and working well (legitimate interests), to meet legal obligations, and to answer a demo request you sent us (steps before a contract). We do not sell personal data or use it for advertising.

We use a few trusted providers: hosting in the European Union (Germany), a network and security provider, an email delivery provider, an error-monitoring provider and an AI provider in the USA (under standard contractual clauses) that only receives grouped results, never names or email addresses. A DPA and our subprocessor list are available on request at privacy@arbnexo.com.

We keep data only as long as we need it, and old data is deleted automatically. Sign-in sessions and email links are removed 30 days after they end, security records after 90 days and the audit log after two years. Demo requests are deleted after 12 months.

A deleted account or a closed company is erased 14 days after the request. Backups rotate out on their own, within six months at most.

You can ask to see, correct, export or delete your data, or object to or limit how we use it. You can export your data and delete your account yourself under Account -> Your data. If you answered a survey for your employer, please contact your employer first; because answers are not linked to anyone, we cannot find a specific person's answers. You can also complain to your data protection authority.

If we change this policy, we update the date above and tell customer companies about significant changes. Questions about your data: privacy@arbnexo.com.