Privacy Policy
Pulse is a deathcare operations platform operated by Bruce & Eddy, LLC (“we”, “us”). It is sold to funeral homes, mortuaries, and autopsy providers (“Customers”), whose staff use it to manage cases, chain of custody, documents, scheduling, and billing. This policy covers the Pulse web application, its administrative panel, and the Pulse CoC mobile app.
Two kinds of data, two different roles
Most information in Pulse is entered by a Customer about a decedent, a family, or a case. We hold that information on the Customer’s behalf and process it only to provide the service and as their agreement with us directs. The Customer decides what is collected, who may see it, and how long it is kept. If you are a family member or next of kin and want to see, correct, or delete records about you or your decedent, contact the funeral home or mortuary handling the arrangements — they control that record, not us.
Separately, we collect a small amount of information about the staff members who use Pulse, described next. For that data we act on our own behalf.
What we collect
Account information
Your name, email address, and the role and company membership assigned to you by your employer. We use this to authenticate you, apply access controls, scope you to the correct tenant, and send transactional email such as invitations and password resets. We do not send marketing email to staff accounts.
Location
The Pulse CoC mobile app requests precise location, and records it when you perform a chain-of-custody scan or a removal trip event. This exists so a custody record can show where a transfer physically occurred, which is the point of a custody chain. Location is captured at those moments, not continuously in the background. You can deny the permission in iOS Settings; scans still work, but the resulting record will not carry a location.
Photos and camera
The app uses the camera to scan QR codes and NFC tags, and to photograph personal effects so they can be attached to a custody record. It can also attach an existing photo from your library. Images you capture or attach are uploaded and stored as part of the case file. We do not access your photo library beyond the items you choose.
Signatures
During intake, the app can capture a signature from the party handing a decedent into your custody. That signature is stored on the custody record as evidence of the transfer.
Diagnostics
We collect crash reports and performance telemetry — stack traces, timings, the route you were on, and the account identifier — to find and fix defects. This is processed by Sentry on our behalf.
What we do not do
We do not sell personal information, share it for cross-context behavioral advertising, or use any of it for tracking as Apple defines that term. Pulse contains no advertising SDKs and no advertising identifiers.
Service providers
We use the following subprocessors. Each receives only what it needs to perform its function, and each is bound by contract to protect it:
- DigitalOcean — application hosting and the managed PostgreSQL database (United States).
- Cloudflare — content delivery, R2 object storage for documents and images, and the AI Gateway that fronts our model providers.
- j17 — append-only event storage backing the chain-of-custody audit trail.
- Sentry — error monitoring and performance telemetry.
- Stripe — payment processing and invoicing. Card details are entered directly with Stripe; we never receive or store them.
- Resend — transactional email.
- Twilio and Bland.ai — SMS and voice notifications for first calls and on-call dispatch.
- DocuSeal — electronic signature workflows for authorization forms.
- OpenAI and Anthropic — AI features such as document extraction and drafting, accessed through Cloudflare AI Gateway. Content sent to these providers is not used to train their models.
Security
Pulse is multi-tenant on a shared database, with tenant isolation enforced in application-level access control on every request. Data is encrypted in transit with TLS and at rest by our hosting and storage providers. Credentials and third-party API keys are stored encrypted. Access to production systems is limited to personnel who need it. No system is perfectly secure, and we do not claim otherwise.
Retention
Case and custody records are retained for as long as the Customer’s account is active, and afterward for the period their agreement and applicable recordkeeping law require — deathcare records often carry multi-year statutory retention. Chain-of-custody events are append-only by design and are not edited or deleted once written, because an audit trail that can be rewritten is not an audit trail. Staff account records are deleted on request once they are no longer needed for the purposes above. Diagnostic data is retained on a rolling window of 90 days.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of personal information about you, and to appeal a refusal. To exercise these rights for a staff account, email us at the address below. For information about a decedent or a family, contact the funeral home or mortuary that holds the record; we will assist them in responding. We do not discriminate against anyone for exercising these rights.
Children
Pulse is an occupational tool for licensed deathcare professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 13.
Changes
We will update this page when our practices change and revise the effective date above. Material changes will also be communicated to Customers directly.
Contact
Questions about this policy, or a request to exercise your rights: [email protected]