1. Who we are
Pounce (“we”, “our”, “us”) provides an on-site behaviour intervention platform that helps businesses recover revenue by responding to visitor intent in real time. This Privacy Policy explains how we collect, use, and protect information when you use our platform or visit getpounce.com.au.
2. What data we collect
Behavioural data (via our tracking script)
When our script is installed on a customer’s website, we collect behavioural signals from end-user visitors, including:
- Pages visited and time spent on each page
- Scroll depth and click patterns
- Session duration and visit frequency
- Exit signals (e.g. viewport position changes indicating intent to leave)
- Device type, browser, and approximate geographic region (country/city level)
We do not collect names, email addresses, phone numbers, or any other personally identifiable information from end-user visitors unless explicitly passed to us by the customer via their data layer.
Account data (customers and team members)
When you create a Pounce account, we collect your name, email address, company name, and billing information.
Communications
If you contact us by email or through our website, we retain that correspondence.
3. How we use data
- To provide the platform: Behavioural data is processed in real time to score visitor intent and trigger interventions configured by our customers.
- To improve the platform: Aggregated, anonymised usage data helps us understand how the product is used and where to improve it.
- To manage accounts: Account data is used for billing, authentication, and customer support.
- To communicate: We may send product updates and service notifications. You can opt out of marketing communications at any time.
4. Legal basis for processing (GDPR)
For customers and their end users in the European Economic Area (EEA) and United Kingdom, we rely on the following legal bases:
- Legitimate interests: Processing behavioural data to deliver the service our customers have contracted us to provide.
- Contract: Processing account data to fulfil our agreement with customers.
- Consent: Where required by applicable law, we rely on consent obtained by our customers from their visitors through their own consent mechanisms (e.g. a cookie banner).
Pounce acts as a data processor in relation to end-user visitor data. Our customers are the data controllers and are responsible for obtaining any necessary consent from their visitors.
5. Cookies and tracking
The Pounce script sets a first-party session cookie to maintain session continuity across page views. This cookie does not contain personally identifiable information. We do not use third-party advertising cookies and we do not sell data to advertising networks.
We respect the Do-Not-Track browser signal. When DNT is enabled, we limit data collection to the minimum required to deliver the service.
6. Data retention
Behavioural session data is retained for 24 months by default. Customers may request deletion of their data at any time. Account data is retained for the duration of the account and for up to 12 months after account closure.
7. Data sharing and third parties
We do not sell personal data. We share data only with:
- Infrastructure providers: Cloud hosting and database services used to operate the platform (e.g. Vercel, AWS). All providers are under data processing agreements.
- Payment processors: Billing data is handled by our payment provider and is not stored on our servers.
- Legal requirements: Where required by law or to protect our legal rights.
8. Data transfers
Data may be processed in countries outside your jurisdiction. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection.
9. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Request portability of your data
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, contact us at privacy@getpounce.com.au.
10. Security
We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect the data we hold.
11. Children
Pounce is not directed at children under 16. We do not knowingly collect data from children.
12. Changes to this policy
We may update this policy from time to time. We’ll notify customers of material changes by email. The “last updated” date at the top of this page reflects the most recent revision.
13. Contact
For privacy questions or to exercise your rights, contact us at privacy@getpounce.com.au.