Privacy Policy

TipMeUp ("TipMeUp", "we", "us") operates the TipMeUp digital tipping service. Our Privacy Officer is accountable for our privacy program and receives questions, access or correction requests, complaints, and reports of suspected privacy incidents.

Contact: privacy@tipmeup.ca. TipMeUp serves professionals and customers internationally and uses service providers in the jurisdictions described below.

This policy applies to personal information handled through our website, tip pages, accounts, dashboards, team tools, support, and payment-related records. Depending on where you live and how the service is used, applicable laws may include Brazil's Lei Geral de Proteção de Dados (LGPD), Israel's Protection of Privacy Law and related regulations, and United States state privacy laws, including the California Consumer Privacy Act (CCPA), as amended. This policy is intended to provide the notices and rights workflow these laws require where they apply.

It does not govern a third party's independent handling of information. For example, Stripe separately handles payment credentials and identity verification under its own privacy terms.

We do not store full card numbers or card security codes. Stripe collects those details in its hosted payment components. We do not sell personal information or use it for third-party behavioural advertising.

• Directly from you when you create an account, profile, tip, rating, or request.
• From a business account that invites you to a team. The invitation identifies the business and lets you choose whether to accept.
• Automatically through essential authentication cookies, security controls, and service logs when you use TipMeUp.
• From Stripe when a payment, payout-account, subscription, refund, or dispute status changes.
• From Google or Apple when you choose social sign-in, limited to the profile information authorized in that sign-in flow.

We identify the purpose at or before collection and collect only what is reasonably needed to provide and secure TipMeUp, process a transaction you request, meet legal obligations, and respond to you. We seek express consent where the context or sensitivity requires it, including account creation and publication of a professional profile.

You may withdraw consent for future optional uses by contacting us. Withdrawal does not affect processing already completed and may not apply where information is needed to complete a transaction, meet legal obligations, prevent fraud, or establish or defend a legal claim. If a core use is withdrawn, some features may no longer work.

• A professional's display name, tagline, photo, suggested amounts, and tip-page address are public by design.
• A professional sees tips and feedback sent to them. Their business workspace owner can also see team transaction and performance information.
• A signed-in tipper sees their own claimed tip history. We do not show their account identity to a professional through the product.
• Authorized staff and vendors receive only the access reasonably required for their role or service.

We use the following categories of providers under contractual or platform terms:

• Stripe for payment processing, connected payout accounts, identity verification, fraud controls, billing, refunds, and disputes.
• Supabase for authentication, database, and profile-photo storage.
• Vercel for website hosting, delivery, and infrastructure logs.
• Resend for delivering transactional team invitations and account or payment notifications.
• Google and Apple only when you choose their sign-in services.

We may also disclose information when required by law, to investigate fraud or a security incident, to protect legal rights or safety, or as part of a business transaction subject to applicable safeguards. We remain accountable for personal information transferred to processors acting for us.

TipMeUp's primary Supabase database is currently hosted in the United States. Stripe, Vercel, Resend, Google, and Apple may process information in the United States or other countries where they operate. Information in another jurisdiction may be accessible to courts, law enforcement, or national-security authorities under that jurisdiction's laws.

We use contractual, technical, and organizational safeguards proportionate to the data's sensitivity, including purpose limitation, access controls, and vendor due diligence. We limit the information sent to each provider and review access and security controls.

TipMeUp uses essential technologies needed to provide requested features: authentication cookies, a language-preference cookie, local storage for theme preference, and Stripe technologies necessary to securely display and process payment methods.

With your consent, we also use Vercel Web Analytics and Google Analytics to measure aggregate website and web-app usage. Analytics stays off until you choose to enable it. We remove query parameters and normalize profile slugs and internal identifiers from page URLs before they are sent for analytics. We do not use advertising cookies or sell or share personal information for cross-context behavioural advertising.

We retain information only as long as needed for the identified purpose:

• Account and profile information is kept while the account is active and for a limited period needed to close the account and resolve requests or disputes.
• Financial transaction, payout, tax, dispute, and accounting records are generally kept for at least six years after the end of the relevant fiscal year, or longer when law or an active dispute requires it.
• Tip-claim links expire after a short period and their secret hashes are cleared after expiry. Team invitations expire after seven days and expired invitation contact data is scheduled for deletion.
• Rate-limit records use hashed addresses and are deleted on a short rolling schedule.
• Privacy-incident records are retained for the period required by applicable law and for a reasonable period to investigate, mitigate, and document the incident.

When retention is no longer justified, we delete or irreversibly anonymize information using safeguards appropriate to its sensitivity.

Safeguards include encryption in transit, restricted service credentials, row-level database access controls, scoped storage permissions, payment-tokenization, origin and content-security controls, rate limiting, and access limited by role.

No system is perfectly secure. We maintain an incident register and assess suspected incidents. Where an incident creates a real risk of significant harm or serious injury, we will notify affected people and the appropriate privacy regulator as soon as feasible or diligently, as applicable.

Subject to limited legal exceptions, you may:

• ask whether we hold personal information about you and how it has been used;
• obtain a copy in understandable form at minimal or no cost;
• request correction of inaccurate or incomplete information;
• request deletion or anonymization where continued retention is not required;
• withdraw consent to future optional use or disclosure;
• where applicable, request portability or a copy in a structured, commonly used format; object to or restrict certain processing; withdraw consent; and ask for review of a decision based solely on automated processing.
• if you are a California resident, request to know, correct, or delete personal information and receive equal service for exercising your rights. TipMeUp does not sell or share personal information for cross-context behavioural advertising, and we honour applicable opt-out preference signals if that practice changes.
• if you are in Brazil or Israel, request information about processing, access, correction, deletion where applicable, and contact us with a privacy complaint. We may need to verify your identity before acting on a request.
• challenge our compliance without retaliation.

Use the signed-in Privacy Centre for an immediate JSON export or to submit a verified request. You may also write to privacy@tipmeup.ca. We may verify identity and must protect information about other people. We aim to respond within 30 calendar days unless law permits an extension.

Professional and business accounts are for people who have reached the age of majority and can enter a binding agreement. TipMeUp is not directed to children. A minor should only tip with the permission of a parent or guardian and using an authorized payment method. If you believe a child provided personal information without appropriate consent, contact us.

TipMeUp does not use personal information to make a decision that produces legal or similarly significant effects about you. Stripe may apply automated fraud and risk tools under its own terms. Contact Stripe for information about its independent processing, or contact us if a TipMeUp account action appears incorrect.

We will post policy changes here and update the date above. If a change materially expands how we use personal information, we will provide a prominent notice and seek new consent where required.

Please contact our Privacy Officer first so we can investigate. You may also complain to the relevant privacy regulator, including Brazil's ANPD, Israel's Privacy Protection Authority, or a United States state regulator where applicable.