Privacy policy

Who is responsible

Tipiro (tipiro.com) is operated by Mazlabs, a company established in France. For anything about your data, write to [email protected].

For the data of customers who leave a tip and of the agents who receive it, the company using Tipiro is the data controller and Tipiro processes the data on its behalf. Tipiro is the controller for HR dashboard accounts and for running the website.

The data we process

• Customers leaving a tip: amount, date and, if you fill them in, your name, email address and message. Stripe processes the payment; Tipiro never sees or stores your card number.
• Agents: name, job title, photo and employee id provided by their employer, and the total tips received. On plans where the agent is paid directly, Stripe collects their identity and bank details to open their payout account.
• HR users: name, work email and, if you sign in with Google, your Google account id and profile picture. We only ask Google for your name, email and picture.
• Technical data: IP address, browser and sign-in timestamps, kept in server logs and sessions to keep the service secure.

Why we use it

• Collect the tip and pay it out to the company or the agent (performance of the contract).
• Produce payroll information: per agent and per period, the instrument used (French payroll instruments or US tip reporting) and the estimated net, with the rationale of each decision (legal obligation and the employer's legitimate interest).
• Show the HR dashboard, authenticate its users and secure the service (performance of the contract, legitimate interest).
• Pass the customer's message on to the recipient, if there is one (the customer's consent).

We do not use your data for advertising and we do not sell it.

Who we share it with

• Stripe, which processes payments and payouts (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., United States, under standard contractual clauses). See Stripe's privacy policy at stripe.com/privacy.
• Google, only if you choose to sign in with Google: Google sends us your name, email and picture, and learns that you use Tipiro.
• Our hosting provider, located in Europe, which stores data encrypted at rest.
• The company using Tipiro, which sees its agents' tips and the name and message left by its customers.

How long

• Tips and routing decisions: for the duration of the contract with the company, then the statutory retention period for payroll and accounting records (up to 10 years).
• User accounts: until the account or the company's workspace is deleted, then 30 days.
• Sessions and technical logs: 30 days (sessions) and up to 12 months (logs).

Your rights

Under the GDPR you can access your data, have it corrected or erased, restrict or object to its processing, and ask for a copy. If you are a customer or an agent of a company using Tipiro, contact that company first; we will help it answer. In any case you can write to [email protected]. You can also lodge a complaint with your data protection authority (in France, the CNIL, cnil.fr).

Cookies

Tipiro only uses strictly necessary cookies: your dashboard session, your language and market choice, and a cookie that lives a few minutes while you sign in with Google. There are no advertising or third-party analytics cookies, so there is no banner to accept.

Changes

We may update this policy; the date at the top shows the current version. For material changes we will email dashboard users.