Privacy Policy

Last updated: May 7, 2026

Provisional version. For questions about your data: [email protected].

1. Who is responsible for your data?

The data controller is TipsTap (company in formation), based in Florennes, Belgium. Contact: [email protected].

2. What data do we collect?

Data	Purpose	Legal basis
Email, first name, profession, city	Registration, communication	Consent
IBAN, identity (KYC)	Tip payouts (via Stripe)	Contract execution
Transaction history	Dashboard, accounting	Contract execution
IP address, technical cookies	Security, fraud prevention	Legitimate interest

No bank data (card number, CVV) is stored by TipsTap. Everything is processed by Stripe (PCI DSS level 1).

3. With whom do we share your data?

Stripe Payments Europe Ltd — payment processing and KYC.
Resend or equivalent — sending transactional emails.
Cloudflare — hosting and protection against attacks.
Plausible Analytics — anonymous usage statistics (without cookie).

No data is sold to third parties for commercial purposes.

4. How long do we keep your data?

Active account: as long as the user uses it.
Closed account: deletion within 30 days, except for legal obligations (accounting: 7 years).
Waiting list (early access): until launch, then deletion on request.

5. Your rights (GDPR)

In accordance with Regulation (EU) 2016/679, you have the following rights at any time:

Right of access, rectification, erasure
Right to data portability
Right to object and to limit processing
Right to withdraw consent
Right to lodge a complaint with the Data Protection Authority (Belgium).

To exercise your rights: [email protected] (response within 30 days).

6. Cookies

TipsTap uses no advertising cookies or third-party tracking. Only strictly necessary cookies (session, security) are deposited. No consent required for these cookies.

7. Security

All communications with TipsTap are encrypted (HTTPS / TLS 1.3). Passwords are hashed (bcrypt). Bank data never passes through our servers.

8. Modifications

Any substantial modification will be notified to you by email at least 30 days before its entry into force.