Your privacy matters to us. This policy explains what information Tulli.io collects, how we use it, and what choices you have. We have written it in plain language because we think you deserve to actually understand it.
1Who We Are
Tulli.io is a national healthcare provider directory operated by TULLIIO LLC, a Connecticut limited liability company. Our website is located at tulli.io. We help patients find licensed healthcare providers and help providers manage their public directory profiles. Tulli.io is a directory service only. We are not a healthcare provider, health insurer, or HIPAA-covered entity. Do not submit protected health information or medical records through this site — any information you submit is not treated as medical data and is not subject to HIPAA protections.
2Information We Collect
From Patients and Visitors
We do not require you to create an account to search Tulli.io. We do not collect or store your search activity. Your IP address and basic request data may be logged automatically by our hosting provider (Vercel) as part of standard web infrastructure — we do not access or use these logs for tracking purposes. We and our service providers may use cookies and similar technologies to maintain site functionality and keep you logged in if applicable. You can control cookies through your browser settings, though disabling them may affect site functionality. We do not sell, rent, or share your information with third parties for marketing purposes.
From Healthcare Providers
When you claim or manage your provider profile, we collect: • Your name and National Provider Identifier (NPI) • Your email address (used for verification and account access) • Profile information you choose to add: bio, website, photo URL, languages spoken, telehealth availability, accepted insurance, conditions treated, and keywords • Payment information processed through Stripe (we do not store your card number — Stripe handles all payment data) Your NPI and basic directory information (name, address, specialty) come from the federal NPPES registry, which is public record.
3How We Use Your Information
We use the information we collect to: • Display provider profiles in search results • Verify your identity as a licensed provider • Send you a one-time verification code by email when you claim or access your profile • Process your subscription payment through Stripe • Send transactional emails (verification codes, billing receipts) through Resend • Improve our search and matching features • Respond to support inquiries We do not use your information for advertising, and we do not sell your data to anyone.
4Email Communications
We send email only when you take an action that requires it: • A 6-digit verification code when you claim your profile or log back in • Billing confirmations from Stripe We do not send marketing emails. If you receive an unexpected email claiming to be from Tulli.io, please contact us at support@tulli.io.
5Third-Party Services
We use the following third-party services to operate Tulli.io: • Supabase — database hosting (your data is stored on Supabase servers) • Vercel — website hosting • Stripe — payment processing (subject to Stripe's own Privacy Policy) • Resend — transactional email delivery • Anthropic Claude API — powers our on-site support chatbot. Messages you send to the chatbot are processed by Anthropic to generate responses. Please do not submit sensitive personal, medical, or financial information through the chatbot. Messages are not treated as confidential medical communications. Each of these providers has its own privacy policy governing how they handle data. Your data may be processed and stored in the United States. We may disclose your information if required by law, legal process, or to protect the rights, safety, or security of TULLIIO LLC, our users, or others. If TULLIIO LLC is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction. We will provide notice if this occurs.
6Data Retention
We retain your provider profile information for as long as your profile exists on Tulli.io. If you wish to have your information removed, contact us at support@tulli.io and we will make reasonable efforts to delete your profile data within 30 days, except where retention is required by law or operational necessity such as billing records. Basic directory information (name, NPI, address, specialty) sourced from the federal NPPES registry is public record and may be re-imported during our monthly NPPES sync process. Please be aware that published provider profiles may be indexed by search engines such as Google. Removing your profile from Tulli.io does not automatically remove it from search engine caches.
7Your Rights
You have the right to: • Access the information we hold about you • Correct inaccurate information in your profile • Request deletion of your profile and associated data • Opt out of any future communications from us To exercise any of these rights, email us at support@tulli.io.
8Children's Privacy
Tulli.io is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9Security
We take reasonable steps to protect your information, including encrypted connections (HTTPS), access controls on our database, and using reputable third-party services with their own security practices. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page. Your continued use of Tulli.io after changes are posted constitutes your acceptance of the updated policy.
11Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us: TULLIIO LLC 9 Union Square, Unit #1196 Southbury, CT 06488 support@tulli.io