Privacy Policy

Pulse — Social Intelligence by SeKondBrain AI
Effective Date: 6 March 2026 · Last Updated: 6 March 2026

1. Introduction

SeKondBrain AI Ltd ("we", "us", or "our") operates the Pulse — Social Intelligence Chrome browser extension and its companion web dashboard (collectively, the "Service").

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains what personal data we collect, the legal bases on which we process it, how we safeguard it, and the rights you have in relation to your data.

By installing the Pulse extension or using the web dashboard you acknowledge the practices described in this policy. Where we rely on consent as a legal basis, we will obtain it separately and you may withdraw it at any time.

2. Data Controller

The data controller responsible for your personal data is:

SeKondBrain AI Ltd
Email: privacy@s9n.ai
Website: https://s9n.ai

3. Information We Collect

3.1 Account Information

When you create a Pulse account we collect:

3.2 Social Media Content

The extension reads content from social platforms (LinkedIn, Twitter/X) that is already visible in your browser as you use those platforms. The specific data points collected include:

Data TypeDescription
Post contentThe text body of feed posts visible on your screen.
Post URLThe permanent link to each post.
Post imagesURLs of images embedded in posts.
Engagement metricsPublicly displayed reaction, comment, and repost counts.
TimestampsWhen the post was published.
Author informationAuthor name and profile URL as shown on the post.

Scope of collection: Pulse only reads content that is already rendered in your browser feed. It does not access private messages, connection lists, profile settings, content behind authentication gates, or data from any platform other than LinkedIn and Twitter/X.

3.3 Extension Usage Data

We store the following locally in your browser via Chrome's storage API:

This data remains on your device and is not transmitted to our servers (except as described in Sections 4 and 5).

3.4 Information We Do Not Collect

Pulse does not collect or access:

4. Legal Bases for Processing

Under UK GDPR Article 6, we process your personal data on the following lawful bases:

Processing PurposeLegal BasisReference
Account creation and authentication Performance of a contract — necessary to provide the Service you have signed up for. Art. 6(1)(b)
Post extraction and display on the dashboard Performance of a contract — core functionality of the Service. Art. 6(1)(b)
Team collaboration (shared tracked-author feeds) Performance of a contract — organisational feature requested at subscription. Art. 6(1)(b)
AI-powered summary generation Legitimate interest — providing actionable insights from publicly available data. See balancing assessment below. Art. 6(1)(f)
Service improvement and extraction accuracy Legitimate interest — improving product quality using aggregated, de-identified patterns. See balancing assessment below. Art. 6(1)(f)
Concept extraction and knowledge graph generation Legitimate interest — deriving structured insights (themes, topics, entities, trends) from publicly available content to power the Service's core intelligence features. See balancing assessment below. Art. 6(1)(f)
Service communications (e.g. security alerts) Legitimate interest — keeping you informed of matters affecting your account. Art. 6(1)(f)

Legitimate Interest Assessment

Where we rely on legitimate interest we have carried out a balancing test:

You have the right to object to processing based on legitimate interest at any time (see Section 11).

5. How We Use Your Information

We use the information we collect to:

  1. Provide the Service — extract, organise, and display social media posts on your Pulse dashboard.
  2. Authenticate you — verify your identity and maintain a secure session across the extension and web dashboard.
  3. Enable team collaboration — share tracked-author feeds and insights within your organisation.
  4. Generate AI-powered summaries — process collected post content through AI models to produce summaries, trend reports, and insights.
  5. Derive concepts and insights — automatically extract themes, topics, entities, and trends from your feed to build a structured knowledge base (“Concept Graph”) that powers recommendations, trend detection, and organisational intelligence. These derived concepts may be used in aggregated, de-identified form to improve the Service for all users.
  6. Improve the Service — analyse aggregated, de-identified usage patterns to improve extraction accuracy and develop new features.
  7. Communicate with you — send service-related notifications such as sync completion alerts and security notices.

6. Automated Decision-Making and AI Processing

Pulse uses artificial intelligence to generate automated summaries and insights from collected social media posts. We are transparent about this processing in accordance with UK GDPR Article 22.

6.1 What the AI Does

When you request a summary, the text content of selected posts is sent to a large language model (LLM) which analyses themes, sentiment, and key points, and returns a structured summary.

6.2 Nature of the Output

AI-generated summaries are informational only. They are not used to make decisions that produce legal effects or similarly significant effects on any individual. The summaries are presented as drafts for your editorial review.

6.3 Accuracy and Limitations

AI models may produce inaccurate or incomplete outputs. You should review all AI-generated content before acting on it or distributing it further.

6.4 Your Rights

You may request human review of any AI-generated output, or object to automated processing of your data, by contacting us at privacy@s9n.ai.

6.5 Safeguards

We conduct Data Protection Impact Assessments (DPIAs) for our AI processing activities and review them periodically to ensure they remain proportionate and necessary.

7. Data Storage and Security

7.1 Local Storage (In Your Browser)

Authentication tokens, tracked-author lists, and sync preferences are stored in Chrome's chrome.storage.local. This data remains on your device and is automatically cleared when you log out of the extension or uninstall it.

7.2 Server-Side Storage

Posts, author records, AI-generated summaries, and account information are stored on our servers in a PostgreSQL database. Data is encrypted in transit using TLS 1.2 or higher and encrypted at rest using industry-standard encryption.

7.3 Security Measures

7.4 Data Breach Procedures

In the event of a personal data breach, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, where feasible, in accordance with UK GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay (Article 34).

8. Data Sharing and Recipients

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

RecipientPurposeSafeguards
Your organisation's team members Shared tracked-author feeds and summaries within Pulse Access scoped to organisation; role-based permissions
AI model provider(s) Generating summaries from post content Data Processing Agreement in place; content used solely for your request and not for model training
Infrastructure providers (hosting, database) Storing and serving data Data Processing Agreements; UK or adequate-jurisdiction data centres
Law enforcement or regulators Where required by law, regulation, or valid legal process Disclosed only to the extent legally required
Successor entity (merger / acquisition) Business continuity Equivalent privacy protections maintained; you will be notified

9. International Data Transfers

Some of your personal data may be transferred to and processed in countries outside the United Kingdom in order to provide the Service.

Where we transfer personal data outside the UK, we ensure an adequate level of protection by relying on one of the following mechanisms in accordance with UK GDPR Article 46:

You may request a copy of the relevant transfer safeguards by contacting us at privacy@s9n.ai.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

Data CategoryRetention Period
Account data (name, email, organisation)Duration of your active account, plus 30 days after deletion request to complete processing.
Extracted post content and author records24 months from the date of collection, or until your organisation's account is closed — whichever is sooner.
AI-generated summaries12 months from the date of generation, unless you delete them earlier.
Local browser data (tokens, preferences, caches)Cleared automatically on logout or extension uninstall.
Server access and error logs90 days.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised.

11. Your Rights Under UK GDPR

As a data subject under the UK GDPR, you have the following rights. You may exercise any of them free of charge by contacting us at privacy@s9n.ai. We will respond within 30 calendar days (extendable by a further 60 days for complex requests, in which case we will notify you).

RightDescriptionReference
Access Request a copy of the personal data we hold about you. Art. 15
Rectification Request correction of inaccurate or incomplete personal data. Art. 16
Erasure Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations. Art. 17
Restriction of processing Request that we limit how we use your data while a concern is being resolved. Art. 18
Data portability Receive your personal data in a structured, commonly used, machine-readable format. Art. 20
Object Object to processing based on legitimate interest, including AI summary generation and concept extraction. Art. 21
Automated decision-making Request human review of decisions made solely by automated means. Art. 22
Withdraw consent Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. Art. 7(3)

Right to Lodge a Complaint

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
Helpline: 0303 123 1113

We would appreciate the opportunity to address your concern directly before you approach the ICO. Please contact us at privacy@s9n.ai in the first instance.

12. Third-Party Services

The Pulse extension does not integrate any third-party analytics, advertising, or tracking services (such as Google Analytics, Mixpanel, or Facebook Pixel). The only network requests the extension makes are to our own backend services (*.apps.s9n.ai) and to the social media platforms you are actively browsing.

13. Browser Permissions

The extension requests the following Chrome permissions, each used for a specific and limited purpose:

PermissionPurpose
storagePersist your login session, preferences, and tracked-author cache locally on your device.
tabsIdentify LinkedIn / Twitter tabs for content extraction and open the Pulse dashboard.
tabGroupsOrganise background sync tabs into a labelled group, visually separated from your browsing tabs.
alarmsSchedule periodic auto-sync (configurable; default every 2 hours) without requiring the popup to stay open.
contextMenusAdd a right-click "Add to Pulse" option on LinkedIn and Twitter/X profiles.
notificationsShow a desktop notification when a background sync completes.
Host permissionsRead feed content on LinkedIn and Twitter/X, and communicate with our backend API at *.apps.s9n.ai.

14. Background Sync

When you initiate a feed sync (or when auto-sync is enabled), the extension opens a temporary browser tab to load and scroll through your LinkedIn feed. This tab is placed in a separate tab group and is automatically closed once the sync completes. Only post content visible in the feed is extracted during this process; no other browsing data is accessed.

15. Disclaimer and Limitation of Liability

15.1 Platform Compliance

Use of the Service involves automated reading of your social media feed. LinkedIn, Twitter/X, and other platforms may have terms of service that restrict or prohibit automated access or data extraction. It is your responsibility to ensure that your use of Pulse complies with the applicable platform terms. We do not guarantee that your use of the Service will not result in restrictions, suspension, or termination of your social media account.

15.2 AI Accuracy

AI-generated summaries, concepts, trends, and insights are provided on an “as is” basis and may contain inaccuracies, omissions, or misinterpretations. You should independently verify all AI-generated content before relying on it, acting upon it, or distributing it to third parties.

15.3 No Professional Advice

The Service does not constitute financial, legal, investment, or any other form of professional advice. You use the outputs of the Service entirely at your own risk.

15.4 Service Availability

We do not guarantee uninterrupted or error-free operation of the Service. We may modify, suspend, or discontinue any part of the Service at any time with or without notice.

15.5 Limitation of Liability

To the maximum extent permitted by applicable law, our total aggregate liability arising from or related to the Service shall not exceed the fees you have paid to us in the twelve (12) months immediately preceding the event giving rise to the claim. Nothing in this policy excludes or limits liability for: (a) fraud or fraudulent misrepresentation; (b) death or personal injury caused by negligence; or (c) any other liability that cannot be excluded or limited under the laws of England and Wales.

16. Children's Privacy

The Service is not directed at, and not intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@s9n.ai and we will promptly delete it.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will:

We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes acceptance of the updated policy, except where further consent is required by law.

18. Contact Us

If you have questions, concerns, or wish to exercise any of your rights under this policy, please contact:

SeKondBrain AI Ltd
Email: privacy@s9n.ai
Website: https://s9n.ai

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office using the contact details in Section 11 above.