Privacy policy
This policy explains how IshaniPulse (“IshaniPulse,” “we,” “us” or “our”) collects, uses, shares and protects personal information, and the choices and rights you have.
Last updated:
This policy applies when you:
- visit our website, www.ishanipulse.com, including IshaniPulse Insights;
- use the PulseOne app or PulseBox, or any other IshaniPulse product that links to this policy; or
- contact us or deal with us in other ways, including sales, marketing and events.
Together we call these our “Services.” If you do not agree with this policy, please do not use the Services. If you have questions, email [email protected].
Summary of key points
- What personal information do we collect?
- Mainly the contact details you give us, such as your name, work email, phone number, role and surgery center. Learn more
- Do we process health information?
- Only inside PulseOne and PulseBox, on behalf of the surgery centers that use them. The website is not designed to receive patient information. Learn more
- Do we receive information from third parties?
- Only when you sign in with Google, which shares your name, email address and profile photo with us. Learn more
- How do we use it?
- To provide and support the Services, reply to you, send updates you ask for, keep the Services secure and meet legal obligations. Learn more
- Do we sell personal information?
- No. We do not sell or share personal information for advertising. Learn more
- What are your rights?
- Depending on where you live, you can ask to access, correct or delete your information, among other rights. Email us to make a request. Learn more
1. What information we collect
In short: we collect the information you give us, and a small amount of technical information needed to run the Services.
Information you give us. What we collect depends on how you use the Services:
- Demo and pricing requests. Your name, work email, surgery center, role and number of operating rooms, and, if you choose to give them, your phone number and a message.
- Insights sign-in, comments and reactions. When you sign in with Google, Google shares your name, email address and profile photo with us. Your name and photo appear next to your comments. Your email address is never shown publicly.
- Insights subscriptions. Your name, email address and the time you agreed to receive updates.
- PulseOne user accounts. For clinicians and staff whose surgery center uses PulseOne: your name, work email, role and permissions, and a record of your sign-ins and actions in the app, which supports security and audit requirements.
- Correspondence. What you send us when you email us, ask for support, take part in a survey or meet us at an event.
Information collected automatically. When you send a demo request, we record the page you sent it from, the website that referred you, any campaign tags in the link (such as utm_source) and the time. Like most websites, our hosting and content providers receive your IP address and browser details when your browser loads our pages.
Information from third parties. The only information we receive from others about you is what Google shares when you choose to sign in with Google.
Please make sure the information you give us is accurate, and let us know if it changes. Please do not send patient information through the website: the demo form, comments and email are not designed to receive protected health information.
2. Health information in PulseOne and PulseBox
In short: patient information in PulseOne belongs to the surgery center that cares for the patient. We process it only to provide the Services to that center.
PulseOne and PulseBox are used by surgery centers to document perioperative care. In doing so, they process patient health information, such as demographics, assessments, medications, vital signs and clinical notes. The surgery center decides what patient information is recorded and how it is used, and the center’s own notice of privacy practices explains patients’ rights.
We process this information only on the center’s behalf and on its instructions, under our agreement with the center and applicable law, including the Health Insurance Portability and Accountability Act (HIPAA) where it applies. We do not sell patient information, use it for advertising, or use it for any purpose other than providing, securing and supporting the Services for that center. Patients who have questions about their health information should contact their surgery center.
3. How we use your information
In short: to provide the Services, reply to you, keep things secure and meet our legal obligations.
We use personal information to:
- reply to demo and pricing requests, and send you a confirmation that we received your request;
- provide, operate, support and improve the Services, including PulseOne user accounts;
- show your comments and reactions on Insights articles;
- send Insights updates if you subscribed;
- understand which pages and campaigns bring people to us;
- protect the Services from spam, fraud, abuse and security threats; and
- comply with the law and enforce our agreements.
We may use information for other purposes with your consent.
4. When and with whom we share your information
In short: we share information only with service providers who help us run the Services, and in the limited situations below. We do not sell it.
- Service providers. We use Google Firebase for our database, sign-in, background processing and email notifications; Cloudflare to host and deliver the website; and Google Fonts to display text. They process information on our behalf under written contracts and may not use it for their own purposes.
- Your surgery center. If you use PulseOne through your employer or a surgery center, that organization can see your account and activity in the app.
- Legal reasons. When required by law, legal process or a government request, or to protect the rights, property or safety of IshaniPulse, our customers or others.
- Business transfers. In connection with a merger, financing, acquisition or sale of all or part of our business, subject to this policy.
We have not sold or shared personal information for cross-context behavioral advertising in the past 12 months, and we will not do so.
5. Cookies, tracking and Do-Not-Track
Our website does not use advertising or analytics cookies, and we do not track you across other websites. The demo form keeps two small items in your browser: any campaign tags from the link you arrived by, for the length of your visit, and the times of your recent submissions, to limit repeated sending. Neither is shared with anyone.
Some browsers offer a Do-Not-Track (“DNT”) setting or Global Privacy Control signal. Because we do not track visitors or sell personal information, there is nothing for these signals to switch off. If that changes, we will update this policy.
6. How long we keep your information
In short: only as long as we need it, unless the law requires longer.
- Demo requests: while we are in contact with you. Requests we mark as not a fit are deleted automatically 24 months later.
- Comments and reactions: until you or a moderator delete them.
- Insights subscriptions: until you unsubscribe, which you can do at any time on the Insights page.
- PulseOne account and patient information: as set out in our agreement with your surgery center and as required by law, such as medical-records and audit rules.
When we no longer need information, we delete or anonymize it. If that is not possible right away, for example because it is in backups, we store it securely and keep it from further use until it can be deleted.
7. How we protect your information
We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls that limit who can see information, and security rules that let website visitors submit demo requests but not read them. Only IshaniPulse team members who handle demo requests or moderate comments can see demo requests and subscriber details. No system is completely secure, so we cannot guarantee absolute security.
8. Children’s information
Our website and Insights are intended for adults and healthcare professionals. We do not knowingly collect personal information from, or market to, anyone under 18 through them. If you believe a child has given us personal information, email [email protected] and we will delete it. Surgery centers may record information about patients who are minors in PulseOne. That information is handled as described in section 2.
9. Your privacy rights
In short: you can ask to see, correct or delete your information, and withdraw consent at any time.
Depending on where you live, you may have the right to:
- know whether we process your personal information, and get access to it or a copy of it;
- correct information that is inaccurate;
- delete your information, subject to legal exceptions;
- withdraw consent where we rely on it, such as for Insights updates, without affecting processing that already took place; and
- object to or restrict certain processing.
To make a request, email [email protected]. We will not discriminate against you for exercising your rights. To protect your information, we will verify your identity first, usually by matching details you give us with what we hold or by contacting you at an email address or phone number you gave us before. We use the information you provide for verification only for that purpose. You may use an authorized agent; we may ask for proof that the agent is authorized to act for you.
If your information is in PulseOne because your surgery center uses it, please contact the center first. We will help the center respond.
10. Rights for U.S. state residents
Several U.S. states, including California and Virginia, give residents specific privacy rights. Where these laws apply to us:
- Right to know and access: the categories and specific pieces of personal information we hold, the sources, the purposes, and the categories of recipients.
- Right to correct and to delete.
- Right to data portability: a copy of information you gave us, in a usable format.
- Right to opt out of the sale of personal information, targeted advertising and certain profiling. We do none of these.
- Right to limit the use of sensitive personal information. We use sensitive information only as needed to provide the Services.
- Right to non-discrimination for exercising these rights.
We respond within 45 days of receiving a verified request. If we need more time, we may extend this once by up to 45 more days and will tell you why within the first 45 days.
Right to appeal. If we decline to act on your request, we will explain why. You can appeal by emailing [email protected]. We will reply in writing within 60 days. If your appeal is denied, you may contact your state attorney general.
California “Shine the Light.” California residents may ask once a year, free of charge, for information about any personal information we disclosed to third parties for their direct marketing. We do not make such disclosures.
Categories of personal information collected in the past 12 months
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, phone number, account name | Yes |
| Professional information | Role, surgery center, number of operating rooms | Yes |
| Internet activity | Page a request was sent from, referring website, campaign tags; PulseOne sign-in and audit records | Yes |
| Sensitive information: health data | Patient information in PulseOne and PulseBox, processed for surgery centers (see section 2) | Yes |
| Commercial or financial information | Payment card or bank details | No |
| Protected characteristics | Gender, date of birth, outside patient records | No |
| Biometric information | Fingerprints, voiceprints | No |
| Geolocation | Precise device location | No |
| Audio, visual or similar information | Recordings of calls or meetings | No |
| Education information | Student records | No |
| Inferences and profiles | Profiles about your preferences or characteristics | No |
Patient information that is protected health information under HIPAA is governed by HIPAA and the surgery center’s policies rather than by these state laws.
11. Changes to this policy
We may update this policy from time to time, for example to reflect new features or legal requirements. We will change the “Last updated” date above, and the new version takes effect when it is posted. If we make material changes, we will let you know by posting a notice on our website or by contacting you directly.
12. How to contact us
For questions about this policy or to make a privacy request, including to review, update or delete your information, email [email protected] or write to us at:
IshaniPulse2850 Garfield Street
Eugene, OR 97405
United States