Privacy Policy

1. Introduction

Pauso (“we,” “our,” or “us”) provides a team mindfulness service delivered through a synchronized, browser-based breathwork session. This Privacy Policy describes how we collect, use, and share information when you use our website and web application (pauso.com) and related services (collectively, the “Service”).

By using Pauso, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Our core privacy commitment

Pauso is built on a zero-recording, privacy-first foundation. We want to be crystal clear about this:

• Sessions have no microphone or camera. A session does not access your microphone or camera at all
• We never record audio or video. There is nothing to record
• There is no chat in a session, so nothing said or typed during a session exists for us to store or analyze

A session plays pre-generated guided breathwork audio and shows synchronized visual guidance in your browser. It does not capture any audio or video from you or your team.

3. Information we collect

3.1 Account information

When you create an account, we collect:

• Email address: Used for authentication, communications, and identifying your organization
• Name: As provided through your authentication provider (Google or Microsoft)
• Profile picture: As provided through your authentication provider (optional)
• Organization domain: Derived from your work email to associate you with your company

3.2 Session link and attendance information

When you create or join a session, we collect:

• Session links you create: So your team can join via the session link
• Session attendance: Which sessions you joined and when
• Completion percentage: How much of a session you were present for
• Presence in a session: Your name and avatar are shown to teammates in the same organization while you are in a session

3.3 Usage information

We collect information about how you use the Service:

• Number of sessions conducted per organization
• Session completion status (started, completed, or failed)
• Session duration
• Features accessed in our web application

3.4 Technical information

We automatically collect certain technical information:

• IP address (anonymized for analytics)
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Referring website
• Error logs and performance data

3.5 Payment information

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card numbers or banking information. We receive only:

• Billing name and address
• Last four digits of payment method (for your reference)
• Payment status and history

4. How we use your information

We use collected information to:

• Provide the Service: Run synchronized sessions, deliver guided mindfulness content, and maintain your account
• Manage subscriptions: Track session usage against your plan limits and process payments
• Improve the Service: Analyze usage patterns to enhance features and fix issues
• Communicate with you: Send service updates, respond to inquiries, and provide support
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests

5. Information sharing

We do not sell your personal information. We share information only in these circumstances:

5.1 Service providers

We work with trusted third parties who help us operate the Service:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• ElevenLabs: AI-generated meditation audio content (no user data is shared with ElevenLabs)
• PostHog: Product analytics
• Vercel: Website and application hosting

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.2 Legal requirements

We may disclose information if required to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from public authorities
• Protect the rights, privacy, safety, or property of Pauso, our users, or others
• Enforce our Terms of Service

5.3 Business transfers

If Pauso is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

5.4 With your consent

We may share information for other purposes with your explicit consent.

6. Data security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (TLS/HTTPS) and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure cloud infrastructure with industry-standard protections
• Employee training on data protection

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or fraud prevention purposes.

Session logs (without personal content) may be retained for up to 12 months for analytics and billing verification purposes.

8. Your rights and choices

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@pauso.com. We will respond within 30 days.

9. Cookies and tracking

We use cookies and similar technologies for:

• Essential cookies: Required for the Service to function (authentication, security)
• Analytics cookies: Help us understand how the Service is used (PostHog)

We do not use advertising cookies or sell data to advertisers. You can control cookie preferences through your browser settings.

10. International data transfers

Your information may be processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

11. Children’s privacy

Pauso is designed for workplace use and is not intended for children under 16. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it promptly.

12. California privacy rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact privacy@pauso.com.

13. European privacy rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland:

• Our legal bases for processing include: contract performance, legitimate interests, and consent
• You have rights to access, rectification, erasure, restriction, portability, and objection
• You may lodge a complaint with your local data protection authority

For GDPR inquiries, contact our Data Protection contact at privacy@pauso.com.

14. Changes to this policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the “Last updated” date
• Sending email notification for significant changes (for registered users)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@pauso.com
• General inquiries: hello@pauso.com