Privacy Notice

Effective: July 16, 2026

1. Scope and controller

This Privacy Notice explains how Spaceport Consulting, LLC (“Spaceport Consulting,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information through getpulsar.ai, its website forms, and its private WordPress relationship-management workspace (the “Site”). Spaceport Consulting is the controller of that website information.

This notice does not govern a customer-operated Pulsar deployment. The organization operating a self-hosted Pulsar environment controls the users, models, prompts, files, logs, storage, backups, retention, and integrations in that environment under its own policies and agreements. Separate customer or service agreements may also contain additional privacy terms.

2. Information you provide

When you submit a product, deployment, documentation, privacy, security, or legal request, we may collect the information you choose to provide.

• Contact identifiers: name, work email address, and optional phone number.
• Professional information: company, role, team size, project interest, and deployment timeline.
• Request content: your message and any follow-up notes or correspondence.
• Relationship information: request stage, assigned owner, follow-up date, and internal relationship notes.
• Request verification: information reasonably necessary to verify and fulfill a privacy, security, or legal request.

3. Information collected automatically

Our hosting and security infrastructure may process standard request information such as IP address, user agent, requested URL, response status, and timestamps in operational logs. The public form uses an IP address and email address to create a one-way, short-lived abuse-control key; the raw IP address is not stored in the CRM record or analytics table by that control.

When included in a request or URL, we may retain the source page, referring URL, and campaign parameters such as source, medium, campaign, content, and term. These fields help us understand how a request reached the Site and respond in context.

4. First-party aggregate analytics

The Site uses a first-party WordPress analytics component for public, logged-out production traffic. It counts approved events such as page views, calls-to-action, form starts and outcomes, documentation clicks, outbound destination domains, page type, interest category, and sanitized acquisition source, medium, and campaign.

Analytics are stored as daily aggregate buckets. The analytics table does not store names, email addresses, phone numbers, companies, free-form messages, CRM record IDs, raw IP addresses, full browsing histories, or persistent visitor identifiers. Logged-in WordPress administrators are excluded. Aggregate analytics are currently configured for 365-day retention and are automatically pruned.

5. Cookies and browser storage

The Site does not use third-party advertising cookies or cross-site behavioral advertising trackers. The analytics component uses session storage to retain privacy-filtered acquisition source, medium, and campaign values during a browser session and to avoid counting the same form outcome more than once in a browser tab. These values expire with the browser session and are not cross-site identifiers.

WordPress may use necessary authentication, security, preference, or administrative cookies for authorized users who sign in. Third-party websites reached through links may use their own cookies and are governed by their own notices.

6. How we use information

• Respond to inquiries and privacy, legal, or security requests.
• Evaluate product fit, infrastructure requirements, documentation access, partnerships, and potential engagements.
• Manage the business relationship, assign follow-up, and maintain accurate request history.
• Operate, secure, troubleshoot, measure, and improve the Site and its forms.
• Prevent spam, fraud, abuse, unauthorized access, and other security incidents.
• Comply with law, enforce our terms, protect rights and safety, and establish or defend legal claims.
• Complete a corporate transaction, subject to appropriate confidentiality and legal requirements.

7. Legal bases for processing

Where a legal basis is required, we process information to take steps you request before entering a contract, perform an agreement, pursue legitimate interests in operating and securing our business and responding to professional inquiries, comply with legal obligations, and, where required, based on consent. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

8. How we disclose information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We may disclose information only as reasonably necessary to the following recipients:

• Service providers: website hosting, infrastructure, email delivery, backup, security, and technical support providers acting for us.
• Professional advisers: attorneys, accountants, auditors, insurers, and consultants subject to appropriate duties.
• Authorities and affected parties: when reasonably necessary to comply with law, respond to lawful process, enforce terms, investigate abuse, or protect rights, safety, and systems.
• Transaction participants: prospective or actual buyers, sellers, lenders, and advisers in a merger, financing, acquisition, reorganization, bankruptcy, or transfer of assets, subject to appropriate safeguards.
• At your direction: another recipient when you ask us to disclose information or provide valid consent.

9. Retention

We retain CRM inquiries while a request or business relationship is active and afterward for as long as reasonably necessary for follow-up, records, dispute resolution, security, and legal obligations. We periodically review records and may delete or de-identify information that is no longer needed. Aggregate analytics are automatically pruned after the configured retention period, currently 365 days. Operational logs and short-lived abuse controls are retained according to security and hosting needs.

We may retain information longer when required by law, subject to a legal hold, needed to establish or defend claims, or necessary to document a completed rights request. Backup copies may persist for a limited period before rotation.

10. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including restricted WordPress administration, input validation, rate controls, private CRM records, and access-limited infrastructure. No internet transmission or storage system can be guaranteed completely secure. Do not submit secrets, credentials, regulated datasets, or other highly sensitive information through public forms.

11. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to appeal or complain to a regulator. You may also ask us to stop non-essential communications. These rights may be limited by exceptions in applicable law.

Submit a request through the Privacy and Legal Request form. We may verify your identity and authority before acting. Authorized agents must provide evidence of authority, and we may still verify the request directly with the individual. We will not discriminate against you for exercising an applicable privacy right.

12. California notice

For California residents, the categories described above may include identifiers, customer-record information, internet or network activity, professional or employment-related information, and inferences limited to product interest and relationship status. We collect these categories from you, your browser or device, referral URLs, and people acting for your organization. We use and disclose them for the business purposes described in this notice.

Where the California Consumer Privacy Act applies, you may request to know, access, correct, or delete covered personal information and receive information about collection and disclosure. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16. Because we do not sell or share personal information as those terms are used by the CCPA, the Site does not provide a “Do Not Sell or Share” link.

13. International visitors

Spaceport Consulting operates the Site from the United States. If you visit from another country, your information may be processed in the United States, where privacy laws may differ. Where required, we use an applicable transfer mechanism or another lawful basis for international transfers.

Residents of the European Economic Area, United Kingdom, or Switzerland may contact their local supervisory authority and may have the rights described above. Please contact us first so we can address the request.

14. Children

The Site is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the Site. If you believe a child submitted information, use the request form so we can review and delete it as appropriate.

15. Third-party links

Links to third-party websites, repositories, documentation, and services are provided for convenience. Their privacy practices are governed by their own notices, not this one.

16. Changes and contact

We may update this notice as our practices or legal obligations change. We will post the revised notice and update the effective date. Submit privacy questions or rights requests through the Privacy and Legal Request form. Provide only the information needed to identify and process the request.