Privacy Policy

1. Introduction

Pauso (“we,” “our,” or “us”) provides a team mindfulness service delivered through a synchronized, browser-based breathwork session. This Privacy Policy describes how we collect, use, and share information when you use our website and web application (pauso.com) and related services (collectively, the “Service”).

By using Pauso, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Our core privacy commitment

Pauso is built on a zero-recording, privacy-first foundation. We want to be crystal clear about this:

• Sessions have no microphone or camera. A session does not access your microphone or camera at all
• We never record audio or video. There is nothing to record
• There is no chat in a session, so nothing said or typed during a session exists for us to store or analyze

A session plays pre-generated guided breathwork audio and shows synchronized visual guidance in your browser. It does not capture any audio or video from you or your team.

3. Information we collect

3.1 Account information

When you create an account, we collect:

• Email address: Used for authentication, communications, and identifying your organization
• Name: As you enter it, or as provided by Google or Microsoft if you sign in with them
• Profile picture: As provided by Google or Microsoft if you sign in with them (optional)
• Organization domain: Derived from your work email to associate you with your company

3.2 Room, session and attendance information

When you create a room or join a session, we collect:

• Rooms you create: Their name and link, so your team can join
• Session attendance: Which sessions you joined and when
• Completion percentage: How much of a session you were present for
• Presence in a session: Your name and avatar are shown to teammates in the same organization while you are in a session

3.3 Usage information

We collect information about how you use the Service:

• Number of sessions conducted per organization
• Session completion status (started, completed, or failed)
• Session duration
• Features accessed in our web application

3.4 Technical information

We automatically collect certain technical information:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Referring website
• Error logs and performance data

3.5 Payment information

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card numbers or banking information. We receive only:

• Billing name and address
• Last four digits of payment method (for your reference)
• Payment status and history

3.6 How you found us

When you first visit, we record the page you landed on and any campaign tags in the link (such as utm_source), in a first-party cookie. If you arrived from a Meta ad, we also record the ad click identifier in the link (fbclid). When you sign up, this record is saved to your account so we can tell which channels bring teams to Pauso.

4. How we use your information

We use collected information to:

• Provide the Service: Run synchronized sessions, deliver guided mindfulness content, and maintain your account
• Manage subscriptions: Track rooms and people against your plan limits and process payments
• Improve the Service: Analyze usage patterns to enhance features and fix issues
• Communicate with you: Send sign-in codes, the emails you ask for, and service updates, respond to inquiries, and provide support
• Measure our advertising: Tell Meta when someone who saw one of our ads signs up for Pauso, so we can see which ads work and show them to similar people (see section 9)
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests

5. Information sharing

We do not sell your personal information. We share information only in these circumstances:

5.1 Service providers

We work with trusted third parties who help us operate the Service:

• Supabase: Database hosting and authentication. Holds your account, workspace, room and session records
• Vercel: Website and application hosting. Receives your IP address and browser details with every request
• Stripe: Payment processing for paid plans
• Resend: Email. Delivers sign-in codes and the emails you ask for, and keeps a contact record for product email: your email address, workspace, how you found us and session activity
• PostHog: Product analytics. Receives the pages you view and the actions you take, linked to your account ID and email address once you sign in
• Meta (Facebook and Instagram): Advertising measurement, through the Meta Pixel and the Meta Conversions API (see section 9)
• ElevenLabs: AI-generated meditation audio content (no user data is shared with ElevenLabs)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.2 Legal requirements

We may disclose information if required to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from public authorities
• Protect the rights, privacy, safety, or property of Pauso, our users, or others
• Enforce our Terms of Service

5.3 Business transfers

If Pauso is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5.4 With your consent

We may share information for other purposes with your explicit consent.

6. Data security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (TLS/HTTPS) and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure cloud infrastructure with industry-standard protections
• Employee training on data protection

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or fraud prevention purposes.

Session logs (without personal content) may be retained for up to 12 months for analytics and billing verification purposes.

8. Your rights and choices

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@pauso.com. We will respond within 30 days.

9. Cookies, analytics and advertising

We use cookies and similar technologies for:

• Essential cookies: Required for the Service to function (authentication, security)
• Attribution cookie: Our own record of how you first found us (section 3.6)
• Analytics cookies: Help us understand how the Service is used (PostHog)
• Advertising cookies: The Meta Pixel’s _fbp and _fbc cookies, which identify your browser and the Meta ad you clicked

9.1 Meta Pixel and Conversions API

We run ads on Facebook and Instagram. To measure them, the Meta Pixel loads on our public website, our sign-up pages and workspace setup. It does not load in sessions or in your dashboard. It tells Meta which of those pages you view and when you complete a step: finishing our quiz, giving a work email address, or creating a workspace.

We also send some of these events to Meta from our servers, through the Conversions API, so they are counted when the pixel is blocked. A server event can include:

• Your email address and your Pauso account ID, both hashed (SHA-256) before they leave our servers. Meta receives a fingerprint of each, not the value, and uses it only to match the event to a Meta account
• The Meta cookies above, and the ad click identifier
• Your IP address and browser user agent
• The page the event happened on
• Details of the step, such as your role and team size from our quiz, or the number of people in your team’s first session

We send the same event ID from your browser and our server, so Meta counts each event once. From the quiz, Meta receives only your role and team size: never your other answers, your result, or the address of a page that carries them. Meta never receives who attended a session; the only session detail we send is the number of people in your team’s first one. Meta processes this data under its own terms and privacy policy.

9.2 Your choices

• Block or clear cookies in your browser settings, or use a content blocker. The site works the same without the Meta Pixel
• Control the ads you see in your Meta ad preferences
• If your browser sends a Global Privacy Control signal, the Meta Pixel does not load in it
• To stop us sending any of your data to Meta, email privacy@pauso.com

We do not sell your personal information. Under some US state laws, sending data to Meta for advertising counts as “sharing”; you can opt out of it with any of the choices above.

10. International data transfers

Your information may be processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

11. Children’s privacy

Pauso is designed for workplace use and is not intended for children under 16. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

12. California privacy rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell data) and of sharing it for advertising (section 9.2)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact privacy@pauso.com.

13. European privacy rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland:

• Our legal bases for processing include: contract performance, legitimate interests, and consent
• You have rights to access, rectification, erasure, restriction, portability, and objection
• You may lodge a complaint with your local data protection authority

For GDPR inquiries, contact our Data Protection contact at privacy@pauso.com.

14. Changes to this policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the “Last updated” date
• Sending email notification for significant changes (for registered users)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@pauso.com
• General inquiries: hello@pauso.com