Good Evening, Guest

Logo

Shopping Cart

0 items pending payment

Loading your cart...

TipTapp Greece

Privacy Policy

Protecting Your Privacy with Transparency

1

Company

TipTap LTD
Limassol, Cyprus
privacy@tiptap.cy

2

Version

v1.0
Effective: Sep 25, 2025

3

Your Rights

• GDPR compliant
• Data portability
• Right to be forgotten

Quick Jump

1. Information We Collect

We collect information you provide directly (name, email, phone), automatically (IP address, browser type), and through cookies for analytics and functionality.

2. How We Use Your Information

Your data is used to: provide services, process transactions, communicate with you, improve our platform, prevent fraud, and comply with legal obligations.

3. Message Encryption & Security

🔒 Top-tier encryption:

We take your privacy seriously. All messages sent through TipTapp Greece are protected with AES-256-GCM — the same standard used by banks and government agencies.

What this means for you:
• Messages are encrypted before they reach our servers
• Stored encrypted and cannot be read by malicious users
• Unique encryption keys rotate every 90 days for maximum security
• Each message has its own initialization vector (IV) to prevent pattern analysis
• Authentication tags guarantee messages are not altered

Admin access & accountability:
For compliance, security, and dispute resolution purposes, our administrators can decrypt messages when necessary. However, we enforce strict accountability:
• Every decryption is logged with admin details, timestamp, and IP address
• Decryption logs are retained for 90 days for audits
• Admins must acknowledge accountability warnings before decryption
• Access is restricted exclusively to authorized personnel

Technical details:
• Algorithm: AES-256-GCM (Galois/Counter Mode with authenticated encryption)
• Key size: 256-bit (32 bytes)
• Key rotation: Automatic every 90 days
• IV length: 128-bit unique per message
• Tag length: 128-bit authentication tag
• Integrity: SHA-256 content hashing

This system ensures your conversations remain private while allowing us to maintain platform safety and comply with legal requirements.

4. Data Sharing

We do not sell your data. We may share information with: service providers (payment processors), legal authorities when required, and in case of business transfers (mergers).

5. Stripe Connect Data Sharing

As a Stripe Connect platform, we share certain user data with Stripe to process payments. This may include personal data, customer data, transaction data, and verification-related information. We disclose this sharing in our privacy policy and rely on user consent where required. Stripe may also share data with us as part of providing services.

6. AI Processing Transparency

When disputes escalate to AI resolution, we send anonymized statements, escrow values, milestone timestamps, and real-time chat messages to OpenAI over TLS 1.3. For AI mediation chats, conversation history is shared to enable contextual understanding and fair decision-making. Sensitive identifiers (payment tokens, phone numbers, national IDs) are never transmitted. All AI chat sessions are stored securely on TipTapp Greece servers and can be reviewed during appeals. You may request deletion of AI payloads and chat transcripts by emailing privacy@tiptapp.gr.

What data reaches OpenAI

  • ✓ Dispute statements, timestamps, escrow totals, and AI mediation chat messages are shared for arbitration.
  • ✓ Names, phone numbers, and payment tokens are stripped before transmission.
  • ✓ AI chat sessions use role identifiers (provider/poster) instead of real names.
  • ✓ Chat transcripts are stored on TipTapp Greece servers for 90 days, then purged unless needed for legal compliance.
  • ✓ AI payloads are retained for 30 days for audits, then purged unless you request earlier deletion.

You may request deletion of AI payloads and chat transcripts via privacy@tiptapp.gr.

7. Your Rights (GDPR)

You have the right to: access your data, correct inaccurate data, delete your data (right to be forgotten), object to processing, data portability, and withdraw consent.

8. Cookies and Tracking

We use essential cookies (login, security), functional cookies (preferences), and analytics cookies (Google Analytics). You can manage cookie preferences in your browser.

9. Data Retention

We retain your data as long as your account is active. After deletion, we may retain certain information for legal compliance (7 years for financial records). Admin decryption logs are retained for 90 days.

10. Children's Privacy

Our platform is not intended for users under 18. We do not knowingly collect information from minors. If we discover such data, we will delete it immediately.

Ready to Get Started?

By using our platform, you agree to our privacy policy and our commitment to protecting your data.

Join Now Ask Questions