Legal

Privacy Policy

Last updated: 1 June 2026

Benchpulse is operated by Kali Rising (UEN: 53525224B), a sole proprietorship registered in Singapore. We take your privacy seriously. This policy explains what data we collect, why we collect it, how we use it, and your rights.

1. Who we are

Benchpulse is a product of Kali Rising (UEN: 53525224B), Singapore. If you have any questions about this policy or your data, contact us at privacy@kali-rising.com.

2. Data we collect

We collect the following categories of data:

• Account data: Your name and email address when you create an account.
• Report data: Instagram account URLs and any manually entered statistics you provide when generating a report.
• Payment data: Payments are processed by Stripe. We do not store your card details. Stripe may collect and store payment information in accordance with their own privacy policy.
• Usage data: Basic usage information such as pages visited, reports generated, and timestamps. We use this to improve the product.
• Waitlist data: If you joined our waitlist, we collected your email address only.
• Communications: If you contact us by email, we retain those communications.

3. How we use your data

• To provide the Benchpulse service — generating reports, saving them to your account, and enabling comparisons.
• To process payments via Stripe.
• To send transactional emails — account confirmation, payment receipts, and report delivery.
• To send product updates and launch announcements if you joined the waitlist. You can unsubscribe at any time.
• To improve the product through anonymised usage analytics.

We do not sell your data. We do not use your data for advertising.

4. Third-party services we use

Benchpulse uses the following third-party services to operate:

• Supabase — database and authentication. Your account data and report data are stored on Supabase infrastructure. Supabase is SOC 2 compliant.
• Stripe — payment processing. Stripe handles all card data. We never see or store your full card number.
• Apify — Instagram public data scraping. When you submit Instagram URLs, Apify fetches publicly available profile data on our behalf. Only public data is accessed.
• Anthropic (Claude API) — AI analysis generation. Report content is generated using Anthropic's Claude API. Report data is sent to Anthropic's API for processing. Anthropic's data retention policies apply to API usage.
• Vercel — hosting and infrastructure.

5. Cookies

Benchpulse uses the following types of cookies:

• Strictly necessary cookies: Required for the service to function, including authentication and session management. These cannot be switched off.
• Functional cookies: Used to remember your preferences and keep you logged in between sessions.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. You can set your browser to block cookies but this may prevent you from logging in or using the service.

6. Legal basis for processing (GDPR)

If you are located in the European Economic Area, our legal basis for processing your data is:

• Contract performance — processing necessary to provide the service you have paid for.
• Legitimate interests — usage analytics and product improvement.
• Consent — marketing emails, which you can withdraw at any time.

7. Singapore PDPA compliance

Benchpulse complies with the Singapore Personal Data Protection Act 2012 (PDPA). We collect, use, and disclose personal data only for purposes that a reasonable person would consider appropriate in the circumstances. You may contact our Data Protection Officer at privacy@kali-rising.com to access, correct, or withdraw consent for your personal data.

8. Data retention

• Account data is retained for as long as your account is active.
• Report data is retained indefinitely to enable the comparison feature. You may request deletion at any time.
• Waitlist emails are deleted within 30 days of our product launch.
• Payment records are retained for 7 years for accounting and tax compliance.

9. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (right to erasure).
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@kali-rising.com. We will respond within 30 days.

10. Data security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database, and access controls. However, no system is completely secure. If you believe your account has been compromised, contact us immediately at privacy@kali-rising.com.

11. International data transfers

Your data may be processed outside Singapore by our third-party service providers including Supabase, Stripe, Apify, and Anthropic. We ensure that appropriate safeguards are in place for any such transfers in accordance with applicable data protection laws.

12. Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. The date at the top of this page reflects when it was last updated.

13. Contact

For any privacy-related questions, contact us at privacy@kali-rising.com.