Who is responsible
Pullmesh operates this website and its email services. Privacy questions, access or deletion requests, and objections can be sent to [email protected]. The monitored postal address used for marketing compliance also appears in every Pullmesh update email.
Information handled
Website and direct requests
The public website is static and has no customer account or self-serve checkout. If you email Pullmesh, the message, your address, and the scope or delivery details you provide are used to answer and keep an accurate business record.
Permission-based updates
The updates form records the email address, selected topic, the wording accepted, policy version, confirmation timestamps, source, and evidence of double opt-in. A security challenge is checked before a confirmation is sent. IP addresses used for confirmation rate limits are immediately hashed rather than stored in raw form.
Update delivery records include a request ID, delivery state, bounce, complaint, and unsubscribe state. Pullmesh deliberately disables open pixels and click tracking for this stream. Email content permits only a clean, allowlisted destination without person-level tracking parameters.
Technical security data
Cloudflare may process ordinary request information such as IP address, browser data, timestamps, and security signals to deliver the site, block abuse, and operate Turnstile. Pullmesh does not use that data to build advertising profiles.
Why information is used
- To answer inquiries and take steps requested before an agreement.
- To document scope, payment confirmation, delivery, support, and licence terms.
- To send a selected update topic only after explicit, confirmed consent.
- To honor opt-outs and prevent another send to a suppressed address.
- To secure the services, rate-limit abuse, diagnose failure, and meet legal duties.
Marketing updates rely on consent. Requested business communication, delivery, and security processing rely on the request, an agreement where one exists, legal duties, and Pullmesh's legitimate interest in running a secure, auditable service.
Service providers and transfers
Cloudflare provides website delivery, Workers, queues, database storage, security, and Turnstile. Brevo processes confirmation and permission-based update email. Resend is kept separate for low-volume transactional messages such as requested replies and delivery notices. These providers may process data in countries outside yours under their published data-protection terms and transfer safeguards.
Pullmesh does not sell personal information or share an update list with data brokers, advertisers, or unrelated outreach tools. Information may be disclosed when required by law, to address abuse or security, or to advisers and service providers bound to an appropriate purpose.
Retention
Update message content is purged after 30 days. Recipient identity in send history is hashed after 90 days, and detailed delivery events are removed after 90 days. Pending confirmations expire after 48 hours and their records are removed within 90 days. Consent evidence is kept while the subscription is active and as reasonably needed to demonstrate permission. A minimal suppression record is kept after an opt-out, bounce, or complaint so that the address is not mailed again.
Inquiry, order, licence, payment, delivery, and support records are retained only as long as reasonably needed for the relationship, accounting, disputes, security, and applicable legal obligations.
Your choices
Every update includes a visible topic-unsubscribe link. You can also email [email protected] to withdraw consent, ask what information Pullmesh holds, request correction or deletion, object to or restrict processing, or request a portable copy where applicable. Identity may need to be verified before fulfilling a request.
Withdrawing consent stops future updates and does not change processing that was lawful before withdrawal. Some minimal records may remain where needed to honor suppression, establish delivery or agreement history, secure the service, or meet a legal duty.
Children and changes
Pullmesh products and updates are directed to business and technical audiences, not children. This notice will be updated when the service or its data handling materially changes, with the effective date revised above.