How SmartPulse protects your business and your customers
This page is maintained by SmartPulse to answer common security, privacy and compliance questions. It describes the controls and practices we currently have in place. It is not a third-party certification.
GDPR (EU / Finland)
SmartPulse is built and operated for European service businesses. Customer phone numbers and SMS content are processed only to recover the missed call and notify the business owner. We honour access and deletion requests; contact info@smartpulse.fi.
Tenant isolation
Every record — calls, conversations, messages, leads, notifications — is tagged with a business_id and protected by row-level security in the database. A business can only ever read or write its own rows.
Role-based access
Three roles only: super_admin (SmartPulse platform owner, internal use), business_admin (owner of one business account), and user (staff inside that business). Roles are stored in a dedicated table; there is no client-side role flag and no fallback that grants elevated access.
Twilio SMS handling
Outbound and inbound SMS are sent via Twilio. We store only the phone number, message content, and timestamps needed to operate the conversation. Numbers are never sold, shared between businesses, or used for marketing by SmartPulse.
Actions depend on the agreed workflow
The automation layer classifies customer replies and summarises the enquiry. Essential captures details for follow-up; Growth includes booking through the agreed calendar setup after customer confirmation. The workflow and connected services must be confirmed during onboarding. This is not medical or legal advice.
No data sharing between businesses
Business records are scoped using account access controls. Hosting locations, subprocessors, international transfers and contractual safeguards must be reviewed for the agreed setup, particularly before handling sensitive information.
Website enquiries and privacy
Smart Pulse Oy receives the name, email address, optional company and phone details, selected offering and message that you submit. These details are stored to review and respond to your enquiry. Do not include sensitive patient information, confidential legal case details or payment credentials in the form.
To ask about access, correction, deletion, retention or the legal basis for processing your enquiry, contact info@smartpulse.fi. Hosting and service-provider arrangements should be confirmed before sharing information that requires special safeguards. You can also contact the Finnish Data Protection Ombudsman about data protection concerns.
Optional measurement
Visitor analytics and advertising measurement are off until you choose to allow them. Where configured, Google Analytics measures site use; Google Ads and Meta measure advertising interactions. You can change or withdraw your choices using Privacy settings in the footer. Enquiries remain available without this consent. Essential preferences, such as language and privacy choices, may be stored in your browser.
External services
Calendly booking, WhatsApp and external profile links are separate services with their own data practices. Use the on-page enquiry form if you prefer not to open an external scheduling or messaging service.
Security questions, data requests, or incident reports: info@smartpulse.fi.