Privacy Policy

What we collect

We collect only what the product needs to function. There are three separate contexts in which we hold personal data, and they do not mix.

• Waitlist signups — your name, email address, whether you are an individual or a company, your company name and team size if you give them, and which page you signed up from.
• Accounts — your email address, a one-way hash of your password, and the profile you choose to publish (display name, photo, bio, company name and page handle).
• Tips — the amount, the currency, the page and team member tipped, the name and message the tipper chose to leave, and the Stripe payment identifier.

What we never collect

We do not see or store card numbers, bank details or identity documents. Payment credentials are entered directly into Stripe's hosted fields and never reach our servers, and identity verification happens entirely inside Stripe.

Who we share it with

Stripe processes every payment and payout and is the only processor that receives payment-related personal data. Analytics providers receive pseudonymous usage events, never your name or email address.

We do not sell personal data, and we do not share it with advertisers.

Where it is stored

Account, page and tip records are stored in a managed MySQL database. Backups are encrypted. Access is limited to the people who operate the service.

How long we keep it

Waitlist entries are kept until you ask us to remove them or until the waitlist closes. Account and tip records are kept for as long as the account is open, and afterwards for the period required for tax and financial record-keeping.

Your choices

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Deleting an account removes your profile and pages; tip records that are required for financial reporting are retained in an anonymised form.

To make a request, contact us at the address published on this site.

Cookies

We set one essential cookie to keep you signed in. Analytics cookies are set only when analytics is enabled for the site, and they carry no directly identifying information.