Privacy Policy
Last updated: 23 July 2026
TipTang respects your privacy. This policy explains what data we collect, how we use it, and how we protect it, in line with Thailand's Personal Data Protection Act (PDPA).
1. Data we collect
• Account info: email, password (stored hashed — never the plain password), display name, bio, profile/cover images • The creator's PromptPay ID (sensitive — stored securely server-side, never exposed to donors or the public) • Donation info: supporter name/message, amount, transfer slip, transaction reference • Technical info: IP address (for rate-limiting and security)
2. How we use your data
• To run the service — receive donations, show stream alerts, and your profile page • To confirm transfers and prevent slip reuse / fraud • To email creators when a new donation arrives • To maintain and secure the platform We do not use your data for advertising and we do not sell it.
3. Storage & security
Data is stored on Supabase infrastructure (database and file storage). Passwords are one-way hashed, and PromptPay IDs are never sent to the public client. We apply reasonable safeguards, but no system is 100% secure.
4. Disclosure & sharing
We do not sell or rent your personal data. We may share data only as needed with service providers that help operate the platform — e.g. hosting (Vercel), database/storage (Supabase), email delivery, and slip-verification services (if enabled) — or when required by law.
5. Your rights (PDPA)
You have the right to access, obtain a copy of, correct, delete, or object to / withdraw consent for the processing of your personal data, including requesting account deletion. Contact us to exercise these rights.
6. Retention & deletion
We keep data only as long as needed to provide the service. When you delete your account, we delete or anonymize your personal data, except where the law requires us to keep it.
7. Contact us
For questions about this policy or to exercise your rights, contact us at support@tiptang.com