1. Information We Collect

We collect the categories below depending on how you use the Service. If you do not provide information that is needed for an account, booking, payment, security check, or legal requirement, we may be unable to provide the relevant feature.

1.1 Account, identity, and contact information

This may include:

• name, display name, username, email address, and account role;
• telephone number or optional contact methods you choose to provide;
• password hash, email-verification status, authentication records, multi-factor authentication settings, and recovery information;
• confirmation that you are at least 18; and
• notification and marketing preferences.

We do not ask you to provide a Social Security number, government identification number, or full financial-account credential to a Creator.

1.2 Creator and public profile information

For Company-authorized Creator profiles, we may collect and publish:

• display name, biography, title, tagline, general location, time zone, credentials, specialties, and service descriptions;
• rates, availability, session duration, links, public contact preferences, photographs, cover images, gallery media, and other profile content; and
• profile revisions, approvals, moderation status, and performance information.

Information identified as public may be visible to anyone and may be indexed, copied, or cached by search engines and other third parties.

1.3 Intake-form, booking, and service information

This may include:

• intake-form questions authored by a Creator, the answers a Follower submits, the version of the form answered, and submission timestamps and status;
• the Creator and offer selected;
• requested date, time, time zone, duration, rate, and custom-request details;
• booking status, confirmation code, acceptance or rejection, completion status, and scheduling history;
• cancellation or rescheduling requests, reasons, decisions, and refunds;
• records relating to attendance, delivery, complaints, support, or disputes; and
• eligible reviews and ratings.

Intake forms are intended only to collect limited information reasonably needed to understand a Follower's general goals and requested service. Do not submit medical records, government-issued identification or identification numbers, payment-card or financial-account details, passwords or authentication codes, biometric information, or other sensitive personal information through an intake form, custom request, or booking message.

1.4 Payment and transaction information

Full payment-card details are submitted directly to and processed by Stripe. We may receive and retain limited payment and transaction information, including:

• Stripe customer, payment-intent, payment-method, refund, and dispute identifiers;
• session price, platform booking service fee, total amount, currency, authorization or capture status, date, and booking or Tribute reference;
• card brand, expiration information, and the final digits of the card when Stripe provides them;
• billing details, authentication result, fraud or risk response, and payment failure information;
• refund, chargeback, dispute, and reconciliation records; and
• electronic receipt information.

Tribute.tips does not intend to store full card numbers or card security codes on its own servers.

1.5 Communications, reviews, and support information

We may collect:

• booking-linked messages between a Follower and Company-authorized Creator personnel;
• Tribute messages, reviews, ratings, complaints, reports, and moderation submissions;
• communications with customer support, legal, privacy, or security personnel;
• records of email delivery, bounces, complaints, and engagement if enabled; and
• administrative access and audit records when authorized personnel review a reported message or support issue.

1.6 Device, usage, analytics, and browser-storage information

When you use the Service, we or our service providers may automatically receive:

• IP address or a shortened or cryptographically transformed IP-based identifier;
• browser and device type, user-agent information, operating system, language, and device class;
• approximate country, general location, and time zone;
• pages viewed, buttons or features used, timestamps, errors, transaction funnel, and session information;
• referring hostname and campaign information such as UTM source, medium, and campaign;
• authentication, security, rate-limit, and fraud signals; and
• cookie, local-storage, or similar identifiers.

Our current first-party analytics may place a cookie named tt_visitor for up to one year. To preserve the first Creator profile through which a visitor reached the Service and show that Creator on a later homepage visit, the Service may also place a first-party cookie named tt_entry_creator for up to one year. When a Creator shares a profile or intake-form URL containing a numeric ref campaign code, the Service may place a first-party cookie named tt_campaign for up to 30 days and associate aggregate profile or intake-form views, active time, feature interactions, registration, booking progress, booking completion, and Tribute completion with that code. Creator dashboards receive these campaign statistics and other page-view or unique-visitor counts only in aggregate, not as visitor identities. The Service may store a limited checkout intent or session/funnel state in your browser so a selected booking or Tribute can be restored after login or verification.

If you answer an intake form before signing in, the Service may temporarily keep the unfinished answers in session storage in your browser so the same tab can restore them after registration, email verification, or login. Those draft answers are not submitted to a Creator until authenticated submission is completed. The browser draft is removed after successful submission and ordinarily ends when that browser-tab session ends.

1.7 Information from other sources

We may receive information from:

• Stripe and payment networks;
• Company-authorized Creator personnel who fulfill a booking;
• other users who send a message, review, report, or complaint involving you;
• security, fraud-prevention, infrastructure, email, and support providers;
• public sources, where reasonably necessary to verify profile claims or protect the Service; and
• government authorities or professional advisers where lawful.

2. How We Use Information

We use personal information to:

• create, authenticate, secure, and administer accounts;
• operate and display Company-controlled Creator profiles;
• present Creator-authored intake forms, preserve unfinished browser-session drafts, and deliver completed responses to the applicable Creator;
• check availability and process booking and custom requests;
• authorize and capture Follower payments for the Company, assess the disclosed platform booking service fee, issue receipts, and administer saved payment methods;
• provide sessions, booking-linked messaging, Tributes, reviews, and notifications;
• make and document acceptance, cancellation, rescheduling, refund, and dispute decisions;
• provide customer service and respond to privacy, legal, and safety requests;
• prevent fraud, card testing, abuse, unauthorized access, prohibited services, and security incidents;
• verify information, enforce our agreements, moderate content, and investigate reports;
• maintain accounting, tax, transaction, audit, and compliance records;
• analyze use, troubleshoot errors, improve performance, and develop Service features;
• send transactional messages and, with the choices required by law, marketing communications;
• establish, exercise, or defend legal claims and comply with law, court orders, sanctions, and regulatory obligations; and
• protect the rights, safety, and property of users, the Company, Stripe, payment networks, and others.

We will not use personal information for a materially incompatible purpose without notice or consent when required by law.

3. Stripe and Payment Processing

Stripe provides payment authorization, capture, payment-method storage, authentication, fraud-prevention, refund, and dispute services to the Company. When you interact with a Stripe payment element, Stripe may collect transaction information, billing and payment-method details, IP address, device and browser information, cookies or similar signals, and fraud, authentication, and risk information.

Stripe uses information under its own privacy terms for purposes that may include payment processing, Link or other user-requested payment features, authentication, fraud and loss prevention, security, service analytics, and legal compliance. Stripe may share information with financial institutions, card networks, identity or fraud providers, and the Company as described in the Stripe Privacy Policy.

At launch, Stripe processes payments for the Company only. We do not use Stripe Connect to create outside Creator payout accounts, and Creators do not provide bank or identity-verification documents through Tribute.tips for payment withdrawals.

4. How We Disclose Information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy.

4.1 Company-authorized Creator personnel

Company-authorized Creator personnel may access responses submitted to that Creator's intake form and may receive an email notifying them that a new response is available in their dashboard. Creator personnel assigned to a booking may also receive limited information needed to review, coordinate, and fulfill that booking, such as your name, booking details, relevant messages, and approved contact method. They do not receive your full card details and may use Follower information only for Company-authorized purposes.

4.2 Payment and financial-services providers

We disclose information to Stripe, payment networks, banks, and fraud or authentication providers to process, authenticate, refund, reconcile, and protect transactions and handle disputes.

4.3 Service providers

We may use vendors that provide hosting, databases, object storage, content delivery, security, authentication, analytics, error monitoring, email delivery (including Resend), customer support, and other operational services. They may process information under contracts and instructions appropriate to their role.

4.4 Professional advisers and authorities

We may disclose information to attorneys, accountants, auditors, insurers, regulators, law enforcement, courts, payment networks, or other authorities where reasonably necessary to comply with law, enforce agreements, prevent harm, or establish and defend claims.

4.5 Business transactions

Information may be disclosed in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or transfer of all or part of the Service, subject to appropriate confidentiality and legal requirements.

4.6 With your direction or consent

We may disclose information when you direct us to do so, such as when you choose a third-party video, messaging, social, or contact link, or when you otherwise provide valid consent.

5. Public and Private Information

Creator profiles and content expressly submitted for public display are public. Reviews that are published are also public. Public information may remain in search-engine caches, archives, screenshots, or third-party copies even after we remove it from the Service.

Submitted intake-form responses and booking-linked messages are not public. An intake response is ordinarily available to the Company-authorized Creator personnel responsible for that intake form and authorized Company administrators when reasonably necessary for support, safety, fraud review, moderation, or legal compliance. Booking-linked messages are ordinarily available to the Follower, the assigned Company-authorized Creator personnel, and similarly authorized Company administrators. Administrative access may be limited by case, purpose, time, and audit logging.

Submitted intake-response content is encrypted in storage. The Creator's notification email tells the Creator that a response is available and links to the protected dashboard; the email does not include the intake answers themselves.

If you leave the Service to use Telegram, Discord, SMS, a video provider, a social network, or another third-party service, that provider independently controls its collection and use of information. Review its privacy policy before sharing information.

6. Cookies, Similar Technologies, and Cross-Site Activity

We and our providers use cookies, browser storage, and similar technologies for:

• account login, authentication, security, and fraud prevention;
• retaining preferences and transaction or checkout state;
• measuring first-party Service use and performance;
• payment processing and payment-method features; and
• preventing duplicate, automated, or abusive activity.

You can control many cookies through your browser, but blocking essential cookies or storage may prevent account, security, booking, or payment features from working.

Stripe may use cookies and similar technologies to recognize devices across interactions with Stripe and its business users, support Link, assess fraud, secure payments, measure services, and perform other activities described in Stripe’s privacy and cookie notices. Other than these disclosed operational and payment activities, the current Service does not intentionally deploy third-party advertising pixels to track you across unrelated sites.

Do Not Track

Some browsers provide a Do Not Track (DNT) signal. Because there is no uniform industry standard for interpreting DNT, Tribute.tips does not currently respond to DNT signals.

Global Privacy Control and other opt-out signals

Global Privacy Control and similar legally recognized opt-out signals are different from DNT. We do not currently sell personal information or process it for cross-context behavioral or targeted advertising, so a sale or targeted-advertising opt-out does not change our current practices. If applicable law requires us to recognize an opt-out preference signal, we will process it as required.

7. No Sale or Targeted Advertising

Currently, Tribute.tips:

• does not sell personal information for money or other valuable consideration;
• does not share personal information for cross-context behavioral advertising;
• does not process personal information for targeted advertising; and
• does not intentionally use its own systems for solely automated decisions that produce legal or similarly significant effects.

We may disclose information to service providers, Stripe, Company-authorized Creator personnel, and others as described in Section 4. Those operational disclosures are not intended as sales of personal information. Stripe’s independent processing is governed by Stripe’s own privacy policy.

Stripe and other security providers may use automated fraud, sanctions, authentication, and risk tools that can block or delay a payment or account action. Contact support@tribute.tips if you believe an automated payment or security decision was made in error. Review may not be available where law, sanctions, card-network rules, or a provider’s independent decision prevents it.

If our practices materially change, we will update this Policy and provide any notice, consent, or opt-out mechanism required by law before the new practice begins.

8. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including:

• account and profile information while an account or Creator profile is active and for a reasonable period afterward for administration, security, disputes, and legal claims;
• booking, payment, refund, and dispute records for transaction completion and applicable tax, accounting, payment-network, chargeback, audit, and legal periods;
• submitted intake responses, messages, reviews, support records, and moderation information as needed to provide the Service, resolve issues, enforce agreements, protect safety, and preserve appropriate business records;
• analytics, security, authentication, and audit records for periods appropriate to troubleshooting, fraud prevention, security, and legal compliance;
• marketing preferences until you opt out, after which we may retain a suppression record so we continue to honor the opt-out; and
• backups until they are overwritten or deleted through our ordinary backup cycle, subject to restricted use.

Retention periods vary by record type, legal obligation, dispute status, sensitivity, and technical context. We may retain information longer where required by law, a litigation hold, a payment dispute, fraud prevention, or a valid government request. When retention is no longer justified, we take reasonable steps to delete, de-identify, or securely dispose of information.

9. Security

We use administrative, technical, and physical safeguards designed for the nature of the information we process. Measures may include encrypted network connections, encryption of submitted intake responses and selected other private fields and messages at rest, password hashing, role-based access, multi-factor authentication, rate limits, access logs, audit controls, vendor management, and incident-response procedures.

No service or transmission is completely secure. You are responsible for using a strong unique password, protecting authentication codes and devices, and notifying support@tribute.tips promptly of suspected misuse.

If a security breach occurs, we will investigate and provide notices as required by applicable law.

10. Your Choices and Privacy Rights

You can review or correct certain account and profile information through your dashboard. You may unsubscribe from promotional emails through the link in the message. You cannot opt out of transactional communications that are necessary to administer an active account, booking, payment, security issue, or legal notice.

Subject to verification, applicable law, and permitted exceptions, we offer U.S. users a process to request:

• confirmation of whether we process their personal information and access to it;
• correction of inaccurate personal information;
• deletion of personal information;
• a portable copy of personal information processed by automated means;
• the categories of third parties to which we disclosed personal information;
• withdrawal of a consent where processing depends on that consent; and
• an opt-out of sale, targeted advertising, or qualifying automated profiling if we engage in those practices in the future.

To submit a request, email privacy@tribute.tips with Privacy Request in the subject line. You do not need to create a new account to submit a request, but using the email associated with your account may help us verify it. We may request information reasonably necessary to verify your identity or authority. An authorized agent may submit a request where law permits, subject to verification of authority.

We may deny or limit a request where permitted by law, including when necessary to complete a transaction, protect security, prevent fraud, comply with tax or accounting obligations, preserve legal claims, protect another person’s rights, or retain a minimal suppression record. We will not unlawfully discriminate against you for exercising a privacy right.

Account closure

You may request account closure by emailing privacy@tribute.tips with Account Closure in the subject line. We will verify the request, restrict future use, and close or deactivate the account when pending bookings, payments, refunds, disputes, or safety matters permit. Closure does not require deletion of records that we may retain under Section 8 or applicable law.

Delaware residents

When the Delaware Personal Data Privacy Act applies, Delaware residents have the rights described above, including the right to appeal a denial. We will respond to an authenticated request without undue delay and within 45 days, subject to a permitted 45-day extension. To appeal, email privacy@tribute.tips with Privacy Appeal in the subject line. We will respond to an appeal within the period required by law. If an appeal is denied, you may contact the Delaware Department of Justice at privacy@delaware.gov.

Rights under other state laws may vary. Mandatory rights remain available even if they are not expressly listed here.

11. Sensitive Information

The Service and its intake forms are not designed to collect medical records, precise geolocation, Social Security numbers, government identification, payment-card or financial-account details, passwords or authentication codes, biometric identifiers, or detailed information about health, religion, racial or ethnic origin, sex life, sexual orientation, gender identity, citizenship, or immigration status from Followers.

Creators must not ask for, and Followers must not include, those categories or other unnecessary sensitive information in an intake form, booking request, message, review, or support communication. If you voluntarily submit sensitive information despite this instruction, we will use it only as reasonably necessary to transmit, secure, moderate, delete, or respond to the communication, unless we provide another notice and obtain any consent required by law. If a future feature requires sensitive information, we will provide a separate notice and obtain affirmative consent where required. General acceptance of the Terms or this Policy is not treated as consent for unrelated sensitive-data processing.

12. Children

The Service is intended only for people who are at least 18. We do not knowingly collect personal information from anyone under 18. If we learn that an under-18 person submitted personal information, we may suspend the account and delete the information, subject to security, fraud, transaction, legal-retention, and child-safety requirements.

To report an underage account, email legal@tribute.tips.

13. Marketing Communications

If you consent to or otherwise lawfully receive marketing communications, you may opt out at any time through the unsubscribe link or by contacting support@tribute.tips. We may retain a limited suppression record to honor your choice.

Transactional emails about accounts, verification, security, bookings, payments, refunds, disputes, or legal matters are not marketing messages.

14. Processing in the United States

The Company is based in the United States, and the Service is currently intended for U.S. users. Information may be processed in the United States and in other locations where our service providers operate. Those locations may have different privacy laws from your home jurisdiction.

We do not currently represent that the Service is configured for general offering in the European Economic Area, United Kingdom, or other jurisdictions with international-transfer requirements.

15. Changes to This Policy

We may update this Policy to reflect changes in the Service, law, vendors, or data practices. We will post the revised Policy with a revised Last Updated date. If a change is material, we will provide additional notice through the Service, email, or another reasonable method and obtain consent where required.

We encourage you to review this Policy periodically. Our use of information remains subject to the Policy in effect when the relevant processing occurs, except as law otherwise permits.

16. Contact Us

Tribute.tips
1221 College Park Dr, Suite 116
Dover, DE 19904
Privacy requests and appeals: privacy@tribute.tips
Customer support: support@tribute.tips
Legal notices: legal@tribute.tips
Website: tribute.tips