The Trust Page
Yes, we have our official Privacy Policy and DPA. But legal jargon aside, we want you to understand exactly what happens when you connect your accounts to Tulu.
What happens when you connect your accounts
The only goal is to match every marketing activity directly to a business outcome.
TL;DR (the bottom line)
No PII: We never read, store, or touch names, emails, or phone numbers.
Targeted write access: We only write to HubSpot (custom properties), Tag Manager (deploying our script), and Ad Networks (automating URL parameters).
No cookie updates: Our script does not collect visitor data.
Read-only analytics: Web Analytics (GA4 & Matomo Analytics) are strictly read-only.
AI boundaries: The AI chat is read-only. If we add agentic execution in the future, it will require your explicit consent—nothing happens without your say-so.
Zero lock-in: Disconnect anytime. Your campaigns keep running without interruption.
GDPR compliant: Tulu is hosted in the EU and follows privacy by design, with zero PII processing, and an industry-standard DPA.
Tulu is hosted in the EU and is fully GDPR compliant. Read more on our Trust Page.
Have more questions? Email us.