Privacy Policy
Last updated · 2026-04-01
Tulala is a platform for roster-based businesses — coordinators, agencies, staffing, casting, and placement organizations. This policy explains the data we collect, why we collect it, how we store it, and the controls you have. We write these pages in plain language on purpose.
What we collect
Account data — the name, email, and organization details you give us to create an account.
Content you add — people profiles, media, inquiries, and site configuration. This is yours; we store and render it on your behalf.
Usage analytics — aggregate events (page views, CTA clicks, inquiry funnel steps) that help us improve the product. You can opt out via the consent banner.
How we use it
To operate the service (rendering your site, delivering inquiries, sending transactional email), to improve the product (in aggregate), and to comply with legal obligations. We do not sell personal data.
The shared network hub
Shared discovery is opt-in per organization and per profile. Nothing is discoverable in the network unless you toggle it on. You can revoke at any time; revocation is immediate.
Data retention & export
Account and content data is retained while your account is active. Full export is available on every paid plan (CSV + JSON; API access on Network). Account deletion removes your content within 30 days; backups age out within 90 days.
Security
Data in transit is encrypted with TLS 1.2+. Data at rest uses industry-standard encryption. Access is role-scoped and audit-logged. We follow OWASP top-ten mitigations and run regular security reviews.
Contact
Privacy questions: privacy@tulala.digital. Data subject requests are handled within 30 days.