OfferPulse

GDPR overview

OfferPulse never mentions the GDPR. The word appears nowhere on the site and no compliance claim is made — this is silence rather than a refusal, but nothing published supports a compliance statement. The privacy policy does list rights that resemble GDPR rights: access, rectification, erasure, objection, restriction, portability and withdrawal of consent. It hedges them with "depending on your location" and routes requests to privacy@offerpulse.io. International transfers are acknowledged with "appropriate safeguards" that are never named — no standard contractual clauses, no adequacy decision. There is no data processing agreement, no subprocessor list, no hosting country, no Article 27 representative and no data protection officer. Security is described generically as encryption in transit and at rest, with no certification cited.

Who owns the data?

The terms split ownership three ways. The service itself — its content, features and trade dress — belongs to OfferPulse and may not be resold or sublicensed without written permission. The competitor information the tool gathers stays publicly available data over which the vendor explicitly claims no ownership, leaving you responsible for using it lawfully and within the monitored sites' own terms. Your account details, monitored URLs and billing data remain yours: the privacy policy states that personal information is not sold, and full card numbers are never stored because Stripe handles payment. The homepage adds that competitor data is not stored at all unless you create an account.

Reuse rights

You may reuse what OfferPulse surfaces without asking the vendor's permission. The terms describe competitor findings as publicly available information over which OfferPulse claims no ownership, so alerts, before/after evidence and snapshots can feed your own pricing, merchandising and campaign decisions freely. Two limits come from the terms rather than the vendor's goodwill. Your use of that data remains subject to applicable law and to the terms of service of the websites being monitored, and you may not resell, redistribute or sublicense the OfferPulse service itself without written permission. Monitoring is also restricted to sites in which you hold a legitimate competitive interest, and automated access beyond normal usage patterns is prohibited.

Data retention & training

Hosting summary

OfferPulse discloses no hosting location. Neither a country nor a region is named anywhere on the site: the privacy policy refers only to unnamed service providers for hosting, payment processing and email delivery. It acknowledges that information may be transferred to and processed in countries other than your own, and asserts that appropriate safeguards are in place without identifying a single mechanism — no standard contractual clauses, no adequacy decision, no named jurisdiction. Security is described in generic terms: encryption in transit and at rest, access controls and regular security assessments, with no certification such as SOC 2 or ISO 27001 cited. The only anchor published is legal rather than technical. The vendor gives an address in London, United Kingdom, and the terms are governed by the laws of England and Wales, with exclusive jurisdiction in the English and Welsh courts. Payments run through Stripe and product analytics through PostHog, the only two processors named anywhere, and neither appears in a formal subprocessor list.