Telluric Health
Privacy Policy
Effective date: 1/1/2019 · Last updated: 1/1/2025
1. Scope
This Privacy Policy explains how Telluric Health ("Telluric," "we," "us") collects, uses, and shares information when you use the Telluric Health Platform. It covers our website, applications, and services.
2. Important: not a HIPAA-covered entity
Telluric is not a HIPAA-covered entity, the Platform is not a HIPAA-compliant service. Do not submit protected health information (PHI), diagnoses, prescription details, insurance information, or other sensitive medical records to the Platform. We will never request such information, and you should not provide it to us or in any part of the website communication including but not limited to: emails or posts in the Community – “Grove”.
3. Information we collect
- Account information — email and authentication identifiers, via our authentication provider.
- Billing information — handled by our payment processor; we do not store full payment card numbers.
- Usage information — searches you run, items you save, and how you interact with the Platform, used to provide and improve the service.
- Technical information — IP address, device/browser metadata, and error diagnostics.
- Communications — messages you send us (e.g., support requests) and the Grove activity.
4. How we use information
- To provide, maintain, and improve the Platform.
- To process subscriptions and payments.
- To authenticate accounts and secure the service.
- To respond to your requests and communicate service information.
- To comply with legal obligations.
We do not sell your personal information.
5. Service providers (sub-processors)
We share information with the following providers only as needed to run the Platform. Each receives the categories of data noted:
| Service | Purpose | What it receives |
|---|---|---|
| Stripe | Payment processing & subscription billing | Name, email, billing details; Telluric does not store full card numbers |
| Clerk | Account authentication & identity | Email, authentication identifiers, login metadata |
| Supabase | Application database & hosting | Account data, saved items, usage records |
| OpenAI/ Anthropic | AI processing of research summaries | Query text and content sent for processing |
| Redis | Caching / performance | Transient cached data and identifiers |
| Vercel | Application hosting & delivery | Request/log metadata, IP address |
| Sentry | Error monitoring | Diagnostic/error data, limited technical identifiers |
| Plausible | Privacy-friendly analytics | Aggregated, cookieless usage metrics |
6. Your rights
GDPR (EEA/UK residents). You may request access to, correction of, deletion of, or a portable copy of your personal data, and may object to or restrict certain processing. We respond to verified requests within 30 days. Our legal bases include performing our contract with you, your consent, and our legitimate interests.
CCPA/CPRA (California residents). You may request to know, delete, or correct personal information, and to opt out of "sale"/"sharing" — note we do not sell personal information. We will not discriminate against you for exercising these rights.
To exercise any right, contact admin@tellurichealth.org.
7. Data retention
We retain personal information for as long as your account is active or as needed to provide the Platform, then delete or anonymize it, except where longer retention is required by law.
8. Data deletion
You may request deletion of your account and associated personal data by emailing admin@tellurichealth.org. We will process verified requests within the timeframe required by applicable law.
9. Security
We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. International transfers
Your information may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.
11. Children
The Platform is not directed to children under 18 (or the applicable age of majority), and we do not knowingly collect their personal information.
12. Cookies and analytics
We use privacy-friendly, cookieless analytics and limited functional cookies necessary to operate the Platform.
13. Changes to this Policy
We may update this Policy from time to time; material changes will be posted here with a new effective date.