TipTang

Privacy Policy

Last updated: 30 September 2026

TipTang (data controller — contact support@tiptang.com) cares about your privacy. This policy explains how we collect, use and protect your data under Thailand's Personal Data Protection Act (PDPA).

  1. Data we collect

    • Account info: email, password (stored hashed — never the plain password), display name, bio, profile/cover images, social links • If you sign in with Google: the email, name and profile picture Google provides to us (we never see your Google password) • The creator's PromptPay ID (sensitive — stored securely server-side, never exposed to donors or the public) • Donation info: supporter name/message, amount, transfer-slip image, transaction reference • Reviews you post on the home page: the name you give, rating and comment • Technical info: IP address (for rate-limiting and security, not stored permanently), a cookie that keeps you signed in, and anonymous page-view statistics via Vercel Analytics

  2. How we use your data

    • To run the service — receive donations, show stream alerts, and your profile page • To confirm transfers and prevent slip reuse / fraud • To email creators when a new donation arrives • To maintain and secure the platform We do not use your data for advertising and we do not sell it.

  3. Storage & security

    Data is stored on Supabase infrastructure (database and file storage). Passwords are one-way hashed, and PromptPay IDs are never sent to the public client. We apply reasonable safeguards, but no system is 100% secure.

  4. Disclosure & sharing

    We do not sell or rent your personal data. We may share data only as needed with the providers that run the platform: hosting and page-view statistics (Vercel), database/file storage (Supabase), email delivery, Google sign-in, and automatic slip verification — slip images are sent to Google (Gemini API) to read the amount and recipient and confirm the transaction — or when required by law.

  5. Your rights (PDPA)

    You have the right to access, obtain a copy of, correct, delete, or object to / withdraw consent for the processing of your personal data. Creators can delete their account themselves under Settings → Account security → Delete account. For the other rights, contact support@tiptang.com.

  6. Retention & deletion

    We keep data only as long as needed to provide the service. • Payment slips and receipts: deleted automatically 90 days after the creator confirms or rejects the payment (180 days if never decided). We keep only the transaction reference, to stop the same slip being reused. • When an account is deleted: its profile, tip history, shop, orders, slips and uploaded files are deleted immediately, except where the law requires us to keep something.

  7. Contact us

    For questions about this policy or to exercise your rights, contact us at support@tiptang.com