Privacy notice
How Pulse collects and uses personal data, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
Last updated: 5 November 2026
Who we are
Pulse is run by Ludus Ent Company Limited, 87 M-Thai Tower, 23rd Floor, Unit TT28, Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand ("Ludus Ent", "we"). We are the data controller for the personal data described here.
What we collect
- Access requests: your name, work email, company, job title, whether you work at a brand or an agency, and the categories you buy for (brands); or your name, email, company or label, role, number of artists and artist names (artist managers and labels).
- Log-in: your email address, so we can send you a log-in link, and records of log-in requests.
- Spam protection: a scrambled (salted and hashed) version of your IP address when you send a form, so we can limit repeated submissions. We don't keep your IP address itself.
- Cookies: essential cookies that remember your language and cookie choice. Analytics cookies (Google Tag Manager and Google Analytics) are used only if you choose "Accept all".
- Artists: names, photos, public platform figures (such as followers and listeners), public news coverage and brand deals of the artists we track, and audience figures that artists or their teams provide.
Why we use it, and on what legal basis
- To reply to access requests and give you access to Pulse: to take steps at your request before entering into an agreement, and our legitimate interests in running the service.
- To keep the site secure and stop spam: our legitimate interests.
- To measure and improve the site with analytics cookies: your consent, which you can withdraw at any time.
- To publish the Pulse charts and artist pages from publicly available information about artists: our legitimate interests and the public's interest in independent music charts. Audience data is shown only as totals and percentages, never about individual fans.
Who we share it with
We don't sell personal data. We use service providers who process data for us under our instructions:
- Lovable and its cloud providers (website hosting, database, sign-in and email)
- Google (Tag Manager and Analytics, only with your consent; Google News results for news coverage)
- Chartmetric (public platform figures about artists) and Serper (news search)
- AI providers through Lovable, which read news headlines to check they are about the right artist
Transfers outside Thailand
Some of these providers store or process data outside Thailand. Where they do, we rely on their contractual and security commitments to protect it as the PDPA requires.
How long we keep it
- Access requests and account details: while your access is active, and for up to 2 years after our last contact.
- Log-in request records and spam-protection data: up to 12 months.
- Analytics data: as set in Google Analytics, up to 14 months.
- Artist data: while the artist is tracked by Pulse. Published monthly charts are kept as a public record.
Your rights
Under the PDPA you can ask to access or get a copy of your personal data, correct it, delete it, restrict or object to its use, move it to another service, and withdraw consent (such as for analytics cookies) at any time. You can also complain to the Office of the Personal Data Protection Committee (PDPC). Artists and their teams can ask us to correct or remove information about them.
Security
Access to personal data is limited to staff who need it, and connections to the site are encrypted.
Contact us
Email privacy@ludusent.com or write to Ludus Ent Company Limited, 87 M-Thai Tower, 23rd Floor, Unit TT28, Wireless Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand. We reply within 30 days.
Changes to this notice
We'll update this page when our practices change and show the date of the latest version above.