1. Who We Are
Pulseboard is operated by 914 MUSIC GROUP LTD, a company registered in England and Wales under company number 14732068, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom (“914 Music Group”, “we”, “us”). Contact us about privacy or your information at hello@914musicgroup.com, or write to the registered office marked “Pulseboard Privacy”.
This notice covers the Pulseboard website, accounts, support and optional connected services. For account administration and our own business operations, we act as a controller. Where a customer places event, artist, staff or other personal information into its workspace, that customer normally decides the purpose of processing and we act as its processor under the applicable data-processing agreement. Contact your workspace organisation about its use of your information; we will assist where appropriate.
2. Information We Handle
Depending on the features you use, information may include:
- Account and business details: name, work email, organisation, membership, roles, authentication and security records.
- Workspace content: event, venue, artist and contact records; offers, schedules, documents, comments, financial details and other material you or your organisation supplies.
- Connected-account information: the data described in section 4, and credentials that allow the authorised connection to work.
- Enquiries and service records: correspondence, support requests, subscription and invoice information.
- Technical information: connection and security logs, browser or device information, timestamps, access events and error records needed to run and protect the service.
Information comes from you, authorised workspace users, your organisation and the services you choose to connect. Do not provide sensitive personal information that is unnecessary for the task. Where a customer intentionally supplies sensitive information, it must establish the appropriate legal basis and restrictions.
3. Why We Use Information
We use information to provide the service you request, maintain accounts, respond to enquiries, administer billing, keep records, troubleshoot problems and protect the service. Where we are the controller, the relevant bases include performance of a contract with you, steps you request before that contract, legal obligations, and legitimate interests in running a secure business service and communicating with business contacts. We balance those interests against individual rights.
We rely on consent where required, including optional marketing or non-essential tracking if introduced. Consent can be withdrawn. Authorising a Google connection is separate from agreeing to marketing. Customer workspace information is processed on the customer’s documented instructions. We do not make decisions with legal or similarly significant effects about individuals solely by automated processing.
4. Google Account Connections
Connecting Google is optional. Google asks you to approve the permissions; we do not ask for your Google password. Availability depends on the enabled integration and its release status. This website preview itself does not connect to Google.
Gmail: Read Offer Conversations and Send Messages
The current Gmail integration requests gmail.readonly and gmail.send. The read permission technically permits access to messages and settings across the connected mailbox; it is not limited by Google to one offer or selected thread. Pulseboard uses it to search for relevant conversations, display linked offer correspondence and identify replies. Information processed includes your connected email address, sender and recipient addresses, subjects, message and thread identifiers, dates, labels/read metadata, plaintext message content and attachment names. Message content passes through Pulseboard’s server for these features. Current attachment viewing is handed off to Gmail.
The send permission lets you send offers and replies from your connected account, including the recipients, message text, signature and attachments you choose. Sending requires your action in the interface. Current functionality does not alter Gmail labels or delete mail.
Google Drive and Other Google Services
Google Drive access is not implemented in the reviewed release. Pulseboard does not gain Drive, Calendar or Google Contacts access merely because you connect Gmail. Before another integration is enabled, its notice will identify the permissions, information, actions, storage and recipients involved, and you will be asked to authorise it. This policy is not permission to access a future service.
See Google Connections for the permission summary and Disconnect & Delete Data for your controls.
5. Google Data: Limited Use
Pulseboard’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including Limited Use requirements. The Google Workspace user data and developer policy also applies.
Google information is used only for the connected, visible functions you authorise. It is not sold, used for advertising, supplied to data brokers, used for lending or credit decisions, or used to train or improve general-purpose AI or machine-learning models.
Access or disclosure is restricted to delivering the authorised feature with your consent, necessary security investigations, legal requirements, or a business transfer with prior explicit consent where Google requires it. Staff and service providers are bound by these restrictions. Human review requires your specific affirmative permission, a necessary security or legal purpose, or the limited aggregated, anonymised internal use permitted by Google’s rules. Connecting an account does not authorise unrelated staff access.
7. Storage, Security and International Transfers
The current Gmail connection stores an encrypted refresh token, connected email address and connection details. Conversation links, message identifiers, reply-state timestamps and send/audit records support the offer workflow. Message subjects and bodies are fetched for the displayed conversation rather than stored as a permanent mailbox archive in those mail tables. Outgoing content is also processed to prepare and send the message.
Access controls, authentication checks and token encryption help protect the service. No system is entirely risk-free. The final production environment must maintain appropriate transport protection, encryption, access management and key handling.
Where information is transferred to a separate organisation outside the UK, applicable transfer requirements must be met through an adequacy arrangement or appropriate safeguards and any necessary assessment. Contact us for the arrangements relevant to your deployment. Production regions and transfer mechanisms remain to be confirmed for this draft.
8. Retention and Deletion
We retain information for the purposes described here, taking account of the active service relationship, customer instructions, the need to resolve disputes, security requirements and applicable legal obligations. We do not retain information indefinitely merely because storage is available.
- Google credentials and conversation links: the current disconnect action removes the connected-account credential and its associated offer-thread links from the active application database. Pulseboard attempts revocation with Google; you can independently revoke access in your Google Account.
- Gmail messages: disconnecting Pulseboard does not delete messages in Gmail or copies already delivered to recipients.
- Other application records: send receipts, audit events, offers, uploaded documents and other customer records are not all erased by disconnecting Gmail. Deletion or retention is assessed under the customer relationship, the purpose of the record and applicable requirements.
- Backups: active-system deletion may precede expiry from protected backups. Retained copies must be isolated from normal use and subject to an approved expiry process; production backup periods must be confirmed before launch.
To request deletion, use the steps on Disconnect & Delete Data. We will explain the scope, any necessary identity checks and any lawful restriction on deletion. Exact production retention schedules and backup expiry remain launch decisions; no unverified deletion deadline is promised in this draft.
9. Your Choices and Rights
Depending on the circumstances and applicable law, you may request access, correction, erasure, restriction or a portable copy of your personal information, object to processing, or withdraw consent. You may object to direct marketing at any time. Some rights depend on the basis and purpose of the processing.
Contact hello@914musicgroup.com. We may need proportionate information to confirm your identity and authority. Do not email passwords, access tokens or unnecessary identity documents. We respond within the applicable legal time limits and explain any permitted extension or refusal. Where a customer controls the information, we may direct or assist your request to that customer.
You can complain to us and, if you remain concerned, to the UK Information Commissioner’s Office or another competent regulator. You do not have to use our complaints route before approaching a regulator.
11. Changes to This Notice
We will date revised notices and communicate material changes appropriately. A new purpose or expanded Google permission requires updated information and fresh authorisation where required before the new use begins. Contact hello@914musicgroup.com with questions.