Privacy Policy
Last updated 25 August 2026
This policy describes the personal data PulseWatch processes when you use the service, and is written to reflect what the application actually does.
Who operates PulseWatch
PulseWatch is operated as a service of 1Desk. It is an independent uptime monitoring service and is not affiliated with any other monitoring product.
Owner review needed: The registered legal entity name, trading address and UK data controller details, plus an ICO registration reference if applicable, must be supplied by the owner and reviewed before this policy is relied upon commercially.
What we collect
- Account data — your email address and authentication identifiers, held by our authentication provider. If you sign in with Google, we receive your email address and basic profile identifiers, not your password.
- Monitor configuration — the URLs or hostnames you ask us to check, plus settings such as interval, timeout, expected status and any keyword.
- Check results — timestamp, up/down outcome, HTTP status code, response time, certificate metadata where available, and any error message. Response bodies are not stored.
- Notification records — a log of alert emails sent to you, so delivery can be verified.
- Abuse-prevention data — a short-lived rate limiting record derived from the requesting network for the public one-off checker.
What we do not do
We do not use advertising or analytics trackers, we do not sell or share your data with advertisers, and the public one-off checker on /check does not persist any result.
Why we process it
To operate the monitoring service you have asked for (performance of a contract), to send the alerts you configure, and to protect the service from abuse (legitimate interests).
Security
Monitors, checks, incidents and status pages are protected by database row-level security so they are readable only by your account. Outbound checks are validated to prevent the service being used to reach private or internal network addresses.
Retention and deletion
Deleting a monitor removes its configuration and associated check and incident history. You can request deletion of your account and remaining data through the contact route you used to sign up.
Owner review needed: A definitive retention period for check history and notification logs, and a named contact for data subject requests, need to be set by the owner.
Your rights
If you are in the UK or EU you have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority (in the UK, the Information Commissioner's Office).