PullStream Privacy Policy
Last Updated: October 2026
PullStream (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information of our customers, partners, and website visitors.
This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under applicable data protection laws in the United Kingdom (UK), United Arab Emirates (UAE), and Kingdom of Saudi Arabia (KSA).
1. Who We Are
PullStream is a technology company that provides automation and AI-driven solutions to help organizations streamline operations, improve efficiency, and scale growth.
Legal Entity: PULLSTREAM LTD, a private company limited by shares registered in England and Wales, company number 17386418. Registered office: 65 Meath Road, Ilford, England, IG1 1JB.
Email: support@pullstream.com
When we decide how and why personal data is processed, we act as a data controller. When we process data on behalf of our clients (for example, automation workflows and platform operations), we act as a data processor and follow the client’s lawful instructions.
2. The Data We Collect
We collect only the data necessary to deliver our services and maintain high security and user experience standards.
A. Information You Provide
Name, company, email, phone number, or job title when contacting us or booking a consultation
Billing and payment details for service transactions
Credentials or identifiers when accessing the Pullstream platform
Communication records such as support messages or meeting notes
B. Information Collected Automatically
IP address, browser type, device, and approximate location
Site usage data such as pages visited and time spent
Cookies and tracking technologies for analytics and preferences (see our Cookies Policy)
C. Client and Workflow Data
When customers use Pullstream’s automation tools, we may process business data, workflow metadata, or integration details strictly for service delivery and maintenance purposes.
3. How We Use Your Data
We process personal data to:
Deliver, support, and improve our automation and AI services
Manage accounts, billing, and customer relationships
Respond to enquiries and provide customer support
Send service updates, security notices, and relevant communications
Conduct research and development to enhance platform performance
Comply with legal and regulatory obligations
Detect and prevent security threats, fraud, or misuse
We never sell or rent personal data to third parties.
4. Legal Basis for Processing
Depending on your region and relationship with us, we process your data under one or more of the following legal bases:
Consent – when you have agreed to communications or marketing
Contract – to deliver or maintain services you request
Legal Obligation – to meet record-keeping or regulatory duties
Legitimate Interests – to improve operations and ensure security
5. Marketing and Communication Preferences
We may send updates about new features, product news, or relevant content if you’ve opted in.
You can withdraw consent or unsubscribe at any time by:
Clicking “unsubscribe” in any email we send, or
Contacting us at support@pullstream.com
We will always honour your communication preferences.
6. Data Transfers and Localisation
PullStream operates internationally with infrastructure in the UK, UAE, and Saudi Arabia. Personal data may be transferred between these locations or to trusted service providers outside your region.
We ensure all cross-border data transfers comply with applicable laws, including:
UK/EU Standard Contractual Clauses (SCCs)
UAE PDPL cross-border transfer mechanisms
Saudi PDPL localisation and transfer approval requirements
Where Saudi PDPL applies, we may store and process personal data within the Kingdom unless a permitted transfer mechanism is approved.
All transfers undergo risk assessments and contractual safeguards to ensure equivalent levels of protection.
7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations.
When data is no longer needed, it will be securely deleted, anonymized, or archived according to retention schedules.
8. Your Rights
Under UK GDPR and Data Protection Act 2018
You have the right to:
Access and obtain a copy of your data
Correct inaccurate or incomplete data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time
Under UAE PDPL
You have the right to:
Access, correct, erase, and port your personal data
Restrict or withdraw consent for specific processing activities
Under Saudi PDPL
You have the right to:
Be informed of data processing purposes
Access and correct your personal data
Request deletion when no longer necessary
File a complaint with the Saudi Data & AI Authority (SDAIA)
To exercise any of these rights, contact support@pullstream.com. We will verify your identity before processing and aim to respond within 30 days.
9. Data Breach Notification
If a personal data breach occurs that may affect your rights or freedoms, PullStream will:
Notify affected individuals and relevant regulators (ICO, UAE Data Office, SDAIA) without undue delay, as required by law
Take immediate steps to contain and mitigate the impact
Review systems and processes to prevent future breaches
10. Cookies and Tracking
We use cookies and similar technologies to:
Ensure website functionality
Personalize user experiences
Analyze website performance
You can control cookies through your browser settings or opt out of analytics cookies at any time. For full details, see our Cookies Policy.
11. Security Measures
We use robust security protocols to protect data against unauthorized access or loss, including:
TLS/SSL encryption
Secure data centers and restricted access
Multi-factor authentication for staff systems
Regular security audits and vulnerability testing
12. Third-Party Processors and Disclosures
We work with selected partners to provide infrastructure, analytics, and payment services. These providers process personal data only under our instructions and with strict confidentiality agreements.
We may disclose data when required by law, court order, or government authority, provided it complies with due process.
12A. Google Workspace API Data and Limited Use
PullStream’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google Workspace data accessed through Gmail and Google Calendar is used only to provide user-facing features in PullStream: the mail and calendar features, and the email suggestions described below. PullStream does not use, transfer, or sell raw, aggregated, anonymized, or derived Google Workspace data to train, fine-tune, or improve generalized or foundational artificial intelligence or machine-learning models.
BanterStream, PullStream’s team messaging app, reads the text of recent messages in a Gmail thread with an AI model to suggest tasks, meetings and opportunities to the user. The model runs on a server PullStream operates. When that server is unavailable, or the text is too long for it, the text goes to an outside AI service provider under a zero data retention setting, so the provider does not keep it. Email suggestions are on by default. The user can turn them off in BanterStream’s settings for each workspace. Email suggestions do not use Google Calendar data.
Google Workspace data is not used for advertising, profiling, credit decisions, or surveillance. Human access is prohibited except with the user’s affirmative consent for support, when necessary for security, or when required by law.
Users can disconnect Gmail or Google Calendar from PullStream to revoke future access and may request deletion of stored integration data by contacting support@pullstream.com.
12B. Microsoft Teams Data
This section applies when you connect a Microsoft work or school account to BanterStream, PullStream’s team messaging app, to use your Microsoft Teams chats.
What we access. With your permission, BanterStream reads and sends messages in your one-to-one and group Teams chats. This includes edits, deletions, reactions, images, files, mentions and the names of the people in each chat. When you connect, we copy up to 90 days of earlier messages. After that, new messages arrive as they are sent. We do not access Teams channels, Teams meetings or meeting chats, or personal Microsoft accounts.
When you start a new chat, BanterStream searches your organisation’s directory for the people you type. We do not store those search results. When you send a file, BanterStream uploads it to your OneDrive and shares it with the people in the chat, as Teams does.
How we keep it. We store your Teams messages encrypted on our servers. The BanterStream app also keeps a copy on the devices where you use it. A one-to-one Teams chat with a colleague in the same BanterStream workspace appears in your BanterStream chat with that colleague, so they can see its Teams messages there, as they can in Teams. Other people in your workspace cannot see your Teams chats.
Suggestions. BanterStream reads the text of recent messages in a Teams chat with an AI model to suggest tasks, meetings and opportunities. Suggestions for chats are on by default. You can turn them off in BanterStream’s settings for each workspace. The model runs on a server we operate. When that server is unavailable, or the text is too long for it, the text goes to an outside AI service provider under a zero data retention setting, so the provider does not keep it. We do not use your Teams data to train AI models.
When we delete it. We delete every Teams message, file, image and name that we hold for you when any of these happen:
you disconnect Teams in BanterStream;
you leave the workspace, or your BanterStream account is closed;
Microsoft ends the connection and you do not reconnect within 30 days. We warn you 7 days before.
In a one-to-one chat with a colleague who has also connected Teams, the Teams messages are theirs too, so we keep them until the colleague’s connection ends as well. The BanterStream app deletes its copies on your devices at the same time as we delete ours.
What stays. The chats themselves stay in Microsoft Teams. A meeting, reminder or opportunity that you confirmed from a suggestion stays, because it is your own record. Notifications already shown on your devices stay until you clear them. Deleted data can remain in our backups until they are overwritten in our normal backup cycle.
Removing access. You can remove BanterStream’s access to your Microsoft account at any time at https://myapps.microsoft.com. Your organisation’s administrator can also remove it for everyone. Removing access stops new messages. To delete the messages BanterStream already holds, disconnect Teams in BanterStream, or contact privacy@pullstream.com.
13. Data Subject Access and Complaints
If you have any concerns about how we handle your personal information, please contact support@pullstream.com first.
If you remain dissatisfied, you can contact:
UK: Information Commissioner’s Office (ICO)
UAE: UAE Data Office
Saudi Arabia: Saudi Data & AI Authority (SDAIA)
14. Children’s Data
Our services are intended for professional and business users. We do not knowingly collect personal data from anyone under 16 years old.
15. Contact Us
For questions, requests, or complaints related to data protection, please contact:
UK Offices:
PULLSTREAM LTD
65 Meath Road
Ilford, England, IG1 1JB
United Kingdom
+44 7404 099 578
UAE Offices:
DD-15-134-004 - 007, Level 15,
Wework Hub71, AlKhatem Tower
Abu Dhabi Global Market Square
Abu Dhabi, Al Maryah Island
United Arab Emirates
+971 56 468 4817