Privacy Policy

HeartLedge is operated by Pulse ROI, LLC, a Texas limited liability company ("Pulse ROI," "we," "us"). This policy explains what we collect, who we share it with, how long we keep it, and how to reach us.

Coaches and organization owners are our customers. Their clients use HeartLedge because their coach does, and for client information the coach decides what is collected and why.

If you are a client and you want a copy of your information, want it corrected, or want it deleted, contact your coach. We act on the coach's instructions.

1. What we collect

From coaches: an email address and password, and the details needed to run a practice on HeartLedge: practice name (which sets a permanent public URL), timezone, currency, optional branding and public profile, subscription status, and the identifiers linking the account to Stripe. Bank details stay with Stripe. If a coach connects Google Calendar, we also collect the email address and account identifier of the Google account they connect and the calendars they choose. Section 10 describes this.

From and about clients: contact details, intake form answers, session records, session notes written by the coach, messages with the coach, and booking and purchase history, and, where the coach has connected Google Calendar, the client's reply to the calendar invitation for a session. Intake forms are written by the coach and we do not review them. Because of what coaching involves, answers and notes can contain sensitive personal information, including health adjacent, emotional, or financial details. Coaches are responsible for obtaining any consent their clients need to give before that information is stored here.

Payments: the amount, currency, status, date, and Stripe reference for each payment and refund, including failed attempts. We never see or store card numbers. Stripe collects card details on its own pages.

Security and technical: a log of sign ins, failed attempts, and lockouts, including the IP address of the request; a record of significant actions taken in an account; and error diagnostics configured to exclude personal information where possible. We collect and retain the IP address associated with a request for account security, to detect and prevent abuse, and to evidence agreement to the Terms of Service.

Cookies: essential cookies only. One keeps you signed in, and short-lived security tokens are used when a coach connects a Stripe account or Google Calendar. On pages where you enter card details, Stripe sets its own cookies to prevent fraud. Analytics on our public pages are cookieless. We use no advertising, marketing, or cross site tracking of any kind, which is why you do not see a cookie banner.

2. How we use it

To run coach accounts and client portals; to deliver the features coaches use (offers, intake, scheduling, calendar connection, notes, messaging, payments); to send transactional email such as verification, sign in links, receipts, and booking confirmations and reminders; to take subscription payments and keep the financial records we are required to keep; to keep the Service secure and diagnose errors; and to comply with law.

We do not sell personal information or share it for advertising. We do not send unsolicited marketing email to clients. We may occasionally send product updates to coaches, who can opt out at any time. We do not use client personal information to train machine learning models. Information we receive from a coach's Google account is used only to provide the calendar features described in Section 10.

3. Who we share it with

We share information with service providers who help us run HeartLedge, each limited to that purpose. These include our hosting and encrypted backup provider (located in the European Union), our payment processor, our transactional email provider, our error monitoring provider, and a cookieless analytics provider for our public pages. We also use a private email service for our own mailboxes.

If we add a new category of service provider that handles personal information, we will update this policy promptly.

Google is not one of these service providers. When a coach connects Google Calendar, session details go to the coach's own Google account at the coach's direction, as described in Section 10.

We may also disclose information where required by law or legal process, to protect our rights or someone's safety, or in connection with a merger, financing, or sale of the HeartLedge business, including a possible spin out of HeartLedge into its own company. A successor will treat transferred information in accordance with this policy until it provides notice of any changes.

4. Where it is stored

Our servers and backups are hosted in the European Union (Hetzner, in Germany). Pulse ROI, LLC is a United States company, and several of our service providers, including our payment processor (Stripe) and transactional email provider, are based in the United States, so information moves between the two regions in normal operation. HeartLedge is offered from the US and aimed at coaches operating in the US. Coaches serving clients in the EEA or UK are responsible for their own obligations there and should contact us before relying on HeartLedge for that purpose.

5. How long we keep it

While an organization is active, we keep what is in it. Coaches can delete client records and export their organization's practice and client records at any time.

When an owner deletes an organization: it is deactivated immediately, a 30 day grace period runs during which signing in and confirming restores everything, and after that we permanently purge clients, intake responses, sessions, notes, messages, offers, purchases, branding, and calendar connection records.

When a coach disconnects Google Calendar, or an owner deletes the organization, we delete our access credentials immediately and ask Google to revoke our access, unless the same Google account is still connected to HeartLedge elsewhere. If that request does not go through, the coach can remove HeartLedge in their Google Account settings. We delete the identifiers that link sessions to Google events after 30 days. The same applies to the previous account when a coach connects a different Google account. A meeting link that was added to a session stays on the session record.

Events already on the coach's Google Calendar, and the copies on clients' calendars, are held by Google in those accounts. We do not remove them and our purge does not reach them. The coach can delete them in Google Calendar.

Three things survive the purge:

• Minimal financial records (amount, currency, status, Stripe reference, date), kept 7 years for tax and accounting, linked only to the organization's name and deletion dates and built so they cannot rebuild any practice or client data.
• Security and audit logs, kept for up to 7 years with the organization reference removed.
• The owner's basic user record (email and hashed password). To have this erased, email questions@heartledge.com and we will delete it where we are not required to keep it.

Backups run daily on a 30 day rolling retention, so purged data ages out within about 30 days. After the purge date, we do not use backups to restore deleted data except where required by law or legal process. Stripe keeps its own records under its own terms.

In setting how long we keep information, we weigh the sensitivity of the information, the purpose we collected it for, applicable legal and tax requirements, and whether we can meet that purpose another way. This is why the security and audit logs and minimal financial records above are kept longer than practice and client data.

6. How we protect it

We use commercially reasonable safeguards to protect information, including encryption in transit on all public endpoints, hashed passwords, Google Calendar access credentials encrypted before they are stored, with the key kept apart from the database, sign in lockout, and access controls that scope each organization’s data so one organization cannot reach another's. Administrative access is limited and the database is not reachable from the public internet. We monitor availability, log errors, and test our backups periodically.

What we do not claim. We hold no SOC 2, ISO 27001, HIPAA, or PCI attestation. HeartLedge is not designed for information subject to HIPAA and we do not sign business associate agreements. Card data never reaches our servers. No system is completely secure, and we cannot guarantee information will never be accessed without authorization. Our liability in connection with the Service is governed by the HeartLedge Terms of Service. If we determine that a breach has resulted in unauthorized access to personal information that poses a real risk of harm, we will notify affected coaches without undue delay and give them what they need to notify their own clients.

7. Your choices

Coaches can view and correct account details, export the organization's practice and client records, delete individual client records, cancel, and delete the entire organization, all from inside the Service. The export does not include the connection settings and credentials for linked services such as Stripe and Google Calendar. A coach can disconnect Google Calendar at any time in Settings, under Calendar, and can also remove HeartLedge's access in their Google Account settings. For anything else, including the surviving user record above, email questions@heartledge.com.

Clients should contact their coach, who holds the tools to view, correct, export, and delete their information. If your coach is unresponsive, you may email questions@heartledge.com and we will make reasonable efforts to assist.

Where a privacy law applicable to our processing of your information gives you rights we are required to honor, email questions@heartledge.com and we will respond within the time that law requires.

We only send transactional email that is part of the Service, so there is no marketing list to leave.

8. Children

HeartLedge is built for adults. Coaches and clients must be 18 or older to use it on their own behalf; a parent or legal guardian may book for a minor and is responsible for that use. We do not knowingly collect information from anyone under 18 without parental or guardian involvement, and we do not knowingly collect information from children under 13 at all. If you believe we have, email questions@heartledge.com and we will delete it.

9. Health and medical information

Coaching is not therapy, counselling, or medical treatment, and coaches using HeartLedge are not acting as licensed therapists, psychologists, physicians, or other healthcare providers. Pulse ROI, LLC is not a “covered entity” or a “business associate” as those terms are defined under the Health Insurance Portability and Accountability Act (“HIPAA”), HeartLedge is not designed for information subject to HIPAA, and we do not sign business associate agreements. We do not ask for, and do not intentionally collect, “protected health information” as defined under HIPAA. While intake answers and session notes written by a coach may contain health adjacent details, coaches are responsible for not storing information that requires HIPAA protection and for obtaining any consent their clients need before storing sensitive information here.

10. Google Calendar (optional, coach-enabled)

Connecting Google Calendar is optional and is the coach's choice. When a coach connects their Google account, we access:

• The email address and account identifier of the Google account, to show which account is connected.
• The names of the coach's calendars, so the coach can choose which ones block booking times. We store the coach's choices, not the list.
• Busy and free times on the calendars the coach chooses, so booking pages do not offer a time when the coach is busy. We receive times only, not event details, and we do not store them.
• Events on the coach's primary calendar. We create, update, and delete the events for sessions booked through HeartLedge. Every few minutes we also check that calendar for changes, so we can restore a session event that was moved or deleted there. That check returns the times, repeat settings, guest email addresses, and guest replies of the coach's other events. It does not return their titles, descriptions, or locations. We use what it returns only to tell which events are ours, and we do not store it.

At the coach's direction, each session event we place on the coach's calendar includes the session time, a title made of the offer name and the client's first name, the client's name and email address as a guest, any meeting link or location, and an internal reference that lets us recognize the event. Google emails the client the invitation, and any later update or cancellation. This applies to every session of a connected coach. If the coach later connects a different Google account, upcoming sessions are added to that account's calendar and Google emails the client again.

We store encrypted access credentials, the connected account's identifier and email address, the permissions granted, the coach's calendar choices, a marker Google gives us to track changes, and, for each session, the identifiers of its Google event, its meeting link, and the client's reply to the invitation. After a switch to a different Google account we also keep the previous account's email address, until the coach reconnects or disconnects.

HeartLedge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this information for advertising, do not sell it, and do not use it to train machine learning models. No person at HeartLedge reads it unless the coach asks us to, it is needed for security, or the law requires it.

11. Third-party sites and services

HeartLedge relies on third-party services such as Stripe and, where a coach connects it, Google Calendar, and our pages and communications may contain links to websites or applications we do not control. We are not responsible for the privacy practices or content of those third-party sites and services, and this policy does not apply to them. We encourage you to read the privacy policy of any third-party site or service before providing personal information to it. Any information you provide to a third party is governed by that party’s own terms and privacy practices.

12. Changes and contact

We may update this policy. Each version carries a version number, an effective date, and the revision history below, and the current version is always at https://heartledge.com/privacy. We will notify coaches by email or in product at least 14 days before a material change takes effect, unless the change is required by law or necessary to address a security concern, in which case it may take effect sooner. Continued use of the Service after an updated policy takes effect constitutes acceptance of the updated policy.

Revision history:

• 1.1.0, effective October 6, 2026: added Section 10 on the optional Google Calendar connection, with related changes in Sections 1, 2, 3, 5, 6, 7 and 11; reworded what the organization export covers. The previous version is at https://heartledge.com/privacy/1.0.0.
• 1.0.0, effective August 2, 2026: first version.

Pulse ROI, LLC (HeartLedge), a Texas limited liability company

Privacy and legal: questions@heartledge.com

Product support: support@heartledge.com