1. Introduction

TipsCy ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our service at tipscy.com.

2. Information We Collect

We collect information you provide directly: restaurant name, email address, and password when registering. For staff accounts: name, email, and role. For guests: no account is required. Payment information is processed directly by Stripe and we do not store card details.

3. How We Use Your Information

We use your information to: provide and operate the TipsCy service, send transactional emails (account verification, password reset, welcome emails), display your restaurant information to guests, process payments through Stripe, and provide analytics about your restaurant performance.

4. Payment Processing

All payments are processed by Stripe, Inc. We do not store credit card information. Tips paid by guests are processed through Stripe and subject to Stripe's own privacy policy and terms of service. We take 0% commission on tips.

5. Data Storage

Your data is stored securely on Neon PostgreSQL servers located in the European Union (Frankfurt, Germany). We use industry-standard encryption for data in transit (HTTPS/TLS).

6. Data Sharing

We do not sell your personal data. We share data only with: Stripe (payment processing), Resend (email delivery), Cloudinary (image storage for restaurant logos), Vercel (hosting). All third parties are GDPR compliant.

7. Your Rights (GDPR)

As a user in the EU/EEA, you have the right to: access your personal data, correct inaccurate data, delete your account and data, export your data, object to processing. To exercise these rights, contact us at hello@tipscy.com.

8. Cookies

We use essential cookies only: session cookies for authentication (NextAuth.js). We do not use tracking or advertising cookies.

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days. Order and payment records may be retained for 7 years for legal compliance.

10. Contact

For privacy-related questions or requests, contact us at: hello@tipscy.com. TipsCy, Nicosia, Cyprus.