Privacy Policy

1. Introduction

Welcome to Tulsisphere ("we", "our", or "us"). Tulsisphere is a global platform connecting retreat venues, facilitators, and chefs. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it. By using our website (tulsisphere.com) or submitting a profile, you agree to the terms of this policy.

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Tulsisphere
Email: hello@tulsisphere.com
Website: tulsisphere.com

If you have any questions about how we handle your data, please contact us at the email above.

3. What Personal Data We Collect

We collect the following categories of personal data depending on how you interact with our platform:

• When you join as a Chef: full name and contact email; professional information including cuisine specialties, dietary expertise, languages spoken, and experience level; location and availability; profile photo if provided; website or social media links if provided.
• When you join as a Venue: venue name, contact name, and email; location, capacity, and facility details; website or social media links if provided.
• When you join as a Facilitator: full name and contact email; retreat specialties, modalities, and experience; location and availability; website or social media links if provided.
• When you sign up for our waitlist: email address and role type (chef, venue, or facilitator).

4. How We Use Your Personal Data

We use your personal data to:

• Create and display your profile on the Tulsisphere platform
• Facilitate connections between retreat venues, facilitators, and chefs
• Communicate with you about your profile, matches, and platform updates
• Send you a confirmation email upon profile submission
• Manage and operate the Tulsisphere platform
• Comply with our legal obligations

Our legal basis for processing your data is your explicit consent, provided via the consent checkbox on our forms. You may withdraw your consent at any time by contacting us.

5. How We Share Your Data

We do not sell your personal data to third parties. We may share your data with:

• Other Tulsisphere users (facilitators, venues, or chefs) for the purposes of making retreat connections
• Technology service providers including Supabase (database hosting) and Vercel (website hosting), who process data on our behalf under strict data protection agreements
• Resend (email delivery service) solely for sending transactional emails

All third-party providers are required to handle your data in accordance with GDPR and applicable data protection laws.

6. How Long We Keep Your Data

We retain your personal data for as long as your profile remains active on the platform. If you request deletion of your profile, we will remove your data within 30 days. We may retain minimal records for legal or accounting purposes where required by law.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your personal data
• Right to restriction — you can ask us to limit how we process your data
• Right to data portability — you can request your data in a structured, machine-readable format
• Right to withdraw consent — you can withdraw your consent to processing at any time
• Right to object — you can object to certain types of processing

To exercise any of these rights, please contact us at hello@tulsisphere.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data correctly.

8. Cookies

Our website may use essential cookies to ensure the website functions correctly. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and seek your consent where required.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our data is stored securely via Supabase, and our website is hosted on Vercel with industry-standard security practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the platform after changes constitutes your acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, please contact us at hello@tulsisphere.com. We aim to respond to all privacy-related enquiries within 30 days.