Privacy Policy
Last updated · 7 October 2026
This page explains what data we collect, what we do with it and what your rights are. The data controller is YUZU LABS SAS, the company behind Digitip, SIREN 994 879 013, 11 rue de Lorraine, 68490 Petit-Landau, France.
1. Data we collect
Account data (name, email), business data (company name, VAT, delivery and billing addresses, accountant's email if you provide it), team data (first name, optional photo, invitation email), tip data (amount, date, staff member receiving it, the customer's email if they ask for a receipt), payout data handled by Stripe (bank details, identity verification), and technical data (IP, browser, language) used for security and audience measurement. With Digitip Pro: notes left by customers (qualities ticked and an optional message, without the customer's name or email) and, for each tip, whether the customer opened the Google review page, with no identifier. For our partner programmes: application details (name, email, phone, city, SIRET), contracts signed electronically (with a fingerprint of the IP address and the browser used to sign) and commission payout data, handled by Stripe. For our outreach to businesses: public information from the INSEE SIRENE register (company name, address, activity, manager's name) and the business contact email.
2. How we use your data
To run the service and our contracts (process tips, manage the team, issue invoices, send statements, provide Digitip Pro, run the partner programmes); to meet our legal obligations (accounting, tax, anti-money laundering); on the basis of our legitimate interest, to secure and improve the product, measure its audience, send you usage tips (which you can switch off in one click) and contact businesses by email (with an unsubscribe link in every message); and, only with your consent, for the Meta advertising measurement described in section 7. Notes are visible to the business's managers and to the staff member they are addressed to. We never sell your data.
3. Payments & Stripe
Card data is collected and processed exclusively by Stripe. Digitip servers never see or store card numbers. Stripe acts as an independent data controller for payment and KYC data. See stripe.com/privacy for details.
4. Sharing
We share your data only with: Stripe (payments and identity verification), Supabase (authentication and database, hosted in the European Union), Vercel (website hosting and cookieless audience measurement), Resend (transactional emails), Brevo (business outreach emails), Google (when you search for your business's listing at sign-up, we send it the name and address you type), Meta for measuring our advertising only if you have accepted it (see section 7), and authorities when required by law. Some of these providers (notably Vercel, Resend and Google) are based in the United States; transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.
5. Retention
Account data is kept while your account is active, then 3 years after it is closed. Accounting records (tips, invoices) are kept 10 years, as the law requires. Notes and Google click statistics are deleted with the business's account. Outreach data is kept at most 3 years after the last contact and deleted as soon as you unsubscribe: we then keep only your SIRET number, so that we never write to you again. Contact requests are kept 3 years, applications we did not take forward 2 years, partner contracts 5 years after they end. Technical logs (payment events, sign-in attempts) are deleted after 30 to 90 days. You may ask for your data to be deleted at any time, subject to these legal obligations.
6. Your rights (GDPR)
You can access, correct, delete or export your data, object to its processing (including to outreach, at any time), ask for it to be restricted, and lodge a complaint with the CNIL. If you left a note and want it removed, write to us with the date and amount of the tip. Write to privacy@digitip.app to exercise your rights.
7. Cookies
We use strictly necessary cookies for authentication and session management, which do not require your consent. On our presentation and ordering pages we also keep, for 30 days, the name of the advertising campaign that brought you (utm_ parameters), with no identifier, to know which campaigns lead to orders; it serves no other purpose and is not combined with any third-party data. Only with your consent, given or refused in the banner shown on those pages, we use the pixel of Meta Platforms Ireland Ltd. (_fbp and _fbc cookies) to measure visits and purchases coming from our ads on Facebook and Instagram. If you accepted it and place an order, we also send Meta, through its Conversions API, the order amount, your email address in hashed form (SHA-256), your country, your IP address and your browser, to link the purchase to the ad. Meta and Digitip are joint controllers for this collection; Meta then processes the data under its own policy (facebook.com/privacy/policy). Your choice is kept for 6 months and can be changed at any time below. Refusing has no effect on your use of the site.
8. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorised staff. We conduct regular security reviews.
9. Contact
For any question about this policy, or to exercise your rights, email privacy@digitip.app or write to YUZU LABS SAS, Data Protection, 11 rue de Lorraine, 68490 Petit-Landau, France.