Privacy

Your local demo

Examples, edits, creation conversations and the onboarding guide—including the name or organization you enter—are stored in this browser under tulipfarm-demo-v1. A reset marker prevents older tabs restoring cleared data. The scripted demo calls no model or connected service.

Use Reset demo in the sidebar to remove the local examples and guide. Clearing site data also removes them. If browser storage is unavailable, the demo uses temporary memory and explains that changes will not survive a reload. Do not enter sensitive information into fictional examples.

The optional live guide

When the live guide is enabled, your questions and a limited recent conversation are sent to TulipFarm Cloud and its Azure GPT-6 Luna model. The sign-up form's names, email and workspace fields are not included in model requests. Do not put private information in chat messages. The interface offers an explicitly scripted alternative.

The endpoint uses Cloudflare Turnstile, a random signed browser identifier that expires after 24 hours, and hashed network identifiers to limit requests. It does not fingerprint your device. The browser identifier is stored separately for each API origin; Reset demo clears it along with local chat data. Turnstile processes verification information. Questions are not intentionally written to endpoint logs; infrastructure providers may have their own logs and policies. Provider retention and data use depend on the configured accounts and need separate confirmation.

Optional analytics

We ask before enabling PostHog usage analytics, masked session replay, heatmaps, performance measurements and error reports. Your choice applies across tulipfarm.ai, docs.tulipfarm.ai and app.tulipfarm.ai. Use Analytics preferences to change it. Do Not Track and Global Privacy Control override acceptance. Feature flags remain available without analytics consent through separate functional requests. Signed-out visitors are anonymous; in the app, signed-in eligibility uses the account ID, email, workspace ID and workspace name to apply the same feature rules as the server. These requests do not create analytics events.

With consent, we collect page visits, interactions, approved demo actions, docs page feedback and masked recordings. A persistent browser identifier connects visits across these sites; signing in links those visits to your account ID. Optional analytics do not include your email or workspace name. Inputs and private example or workspace content are masked or blocked. URL queries and fragments are removed except approved campaign labels. Error messages are removed; browser logs contain fixed event codes, not console contents. Request bodies, headers, chat text, names, table contents and search queries are not recorded. Survey support is available only with consent; this integration does not create a survey campaign. Network requests still expose connection information to PostHog.

Your choice is saved in the shared tulipfarm.analytics-consent.v2 cookie for up to 180 days. PostHog uses cookies and local storage after acceptance. Existing accepted website preferences migrate unless your browser requests no tracking. Revoking stops new capture and cancels queued delivery; requests already received cannot be recalled. Allowing again after revocation reloads the page. Resetting the demo preserves analytics and theme preferences. Provider data retention still needs legal review.

Signing in and the application

The chat's sign-up form sends your reviewed workspace details and a limited recent transcript to TulipFarm Cloud. This temporary draft expires after 24 hours. Resetting the local demo does not delete that server draft. Email sign-in also sends the name and email you enter. Email or Google verifies your identity, then restores the saved chat in the separately hosted app to finish workspace setup. The email can be opened on another device. Filling the form alone does not create a workspace. Local demo records and the saved transcript are not imported into a private workspace conversation.

Application accounts, workspace records, files and connected-service permissions have their own data handling. The website demo does not establish hosted application retention or security guarantees.

Questions and requests

For privacy questions, contact [email protected]. A verified retention schedule, legal ownership and formal access, correction or deletion procedure remain to be confirmed. Do not include credentials or private workspace data in public issues.