Privacy Policy
Last updated: June 5, 2026
This policy describes what data the Pulse application processes, where it is stored, and what rights you have. Pulse runs inside your Microsoft 365 environment and is designed so that your content stays in your Microsoft tenant.
1. Who processes the data
The operator of the Pulse application is Data2Drive Solutions S.L. (hereinafter "we"), Spain. Pulse is distributed under the Aragon Lab marketing brand. For data processing inquiries: privacy@aragon-lab.com.
When processing data as part of operating Pulse for your organization, we act as a data processor on behalf of your organization (the data controller). The terms of processing are set out in the contract with your organization.
2. What data we process
| Category | Details | Purpose |
|---|---|---|
| Profile and sign-in | Name, work email, Microsoft user and tenant identifier (Entra ID) | Authentication (single sign-on), roles, and access rights |
| Process data | Projects, stages, statuses, field values, approvals, activity log | Operation of the process engine and control tower |
| Document metadata | Links and access rights to folders/files in your SharePoint | Managing access to project documents |
| Teams and notifications | Identifiers of channels/teams that Pulse creates, and the cards sent | Auto-creating channels for projects and notifications |
| Calendar | Events that Pulse creates at your request (for example, a site visit) | Scheduling in Outlook/the calendar |
Pulse is not intended to collect special categories of personal data and does not use your data for advertising or for training third-party models.
3. Where data is stored
- Your content stays in your Microsoft. Documents and files stay in your SharePoint; communications and channels in your Teams; events in your calendar. They do not leave your Microsoft tenant. Pulse manages access rights and processes on top of them.
- Process metadata stays with us. Statuses, field values, and the activity log are stored in a database-level isolated space in the Microsoft Azure infrastructure (EU region).
4. Access to Microsoft 365
To operate, Pulse requests Microsoft Graph permissions (for example, the user profile and access to SharePoint and Teams to the extent needed to create folders, channels, and notifications). These permissions are granted by your organization's administrator when the application is connected and can be revoked at any time through the Microsoft administration center. Pulse uses this access only for the features described here.
5. Legal bases (GDPR)
We process data on the basis of: performance of the contract with your organization; our legitimate interest in ensuring the operation and security of the service; and, in the part defined by your organization as the data controller.
6. Subprocessors
- Microsoft (Azure — hosting; Microsoft Graph — access to your M365 services).
We do not share your data with third parties for their own purposes.
7. Retention period
Process metadata is retained for as long as your organization uses Pulse. After use ends, it is deleted or anonymized within a reasonable period, unless otherwise required by law. Your content in Microsoft remains with you and under your control.
8. Your rights
Under the GDPR, you have the right to request access to your data, its rectification, erasure, restriction, or portability, as well as to object to processing. Send requests to privacy@aragon-lab.com — or through your organization's administrator, if it acts as the data controller.
9. Security
Access is protected by Microsoft single sign-on (Entra ID). Data transmission is encrypted (TLS), and storage is in the secured Azure infrastructure. Access to data within our team is limited on a need-to-know basis.
10. Changes
We may update this policy. We will notify your organization of material changes. The date of the last update is shown at the top.
11. Cookies and analytics on this site
This website (aragon-lab.com) uses cookies. Essential cookies needed for the site to work are always set. Analytics cookies load only after you consent via the banner; you can change your choice anytime through the “Cookie settings” link in the footer. If you choose “Essential only”, no analytics cookies are loaded.
| Service | Purpose | Cookies |
|---|---|---|
| Microsoft Clarity | On-site behaviour analytics (heatmaps, session replays) to improve the site | _clck, _clsk |
| HubSpot | Visit analytics and attributing a submitted form to the visit | hubspotutk, __hstc, __hssc, __hssrc |
These services are provided by Microsoft and HubSpot respectively; the data is processed under their own privacy policies.
privacy@aragon-lab.com