Privacy Policy

This Privacy Policy explains what information TipMeL8r collects, how we use it, and the choices you have. TipMeL8r is a proof-of-concept pilot — we intentionally collect as little personal information as the product needs to function.

• Worker account information: display name, gig categories, email address, and a securely hashed (never plaintext) password.
• Tip records: tip amount, optional platform contribution, timing/scheduling choice, optional customer name typed in by the customer, and status (pending, scheduled, completed, failed).
• Stripe references only — never card data: we store Stripe's own opaque reference identifiers (e.g. Checkout Session ID, Payment Intent ID, Customer ID, Connect Account ID) so we can look up a transaction's status. We never see, receive, or store full card numbers, CVCs, or bank account numbers — those go directly to Stripe on Stripe's own secure, hosted pages.
• Session cookies: a single httpOnly session cookie that keeps you logged in; it contains a random token, not your password.

• To operate your tip page, process Tip Now / Tip L8r checkout, and show your dashboard.
• To send you a transactional confirmation email when you sign up (via our email provider, SendGrid).
• To route tips (minus nothing extra) to your connected Stripe account.
• To detect and prevent fraud or abuse of the platform.

We do not sell your personal information, and we do not use your data for third-party advertising.

• Stripe, Inc. — processes all payments, Stripe Connect payouts, and stores actual payment method details under its own privacy policy and PCI-compliant infrastructure.
• SendGrid (Twilio SendGrid) — delivers transactional account-confirmation emails on our behalf.
• Cloudflare, Inc. — hosts our application and database infrastructure (Cloudflare Workers and D1).

We do not share your information with any other third party except as required by law.

We retain account and tip records for as long as your account is active, or as needed to comply with legal, tax, or accounting obligations. You can request deletion of your account by contacting us (see below) — note that Stripe may independently retain transaction records as required by financial regulation.

You can review and update your worker profile details at any time from your dashboard. You can request account deletion or a copy of the information we hold about you by emailing us.

Passwords are hashed using PBKDF2 with a per-user random salt — we never store plaintext passwords. Payment details never touch our servers; they're entered directly on Stripe's PCI-compliant hosted pages. Our Stripe API keys are stored as encrypted secrets and are never exposed to the browser.

TipMeL8r is not directed to anyone under 18, and we do not knowingly collect personal information from children.

As an active pilot, this policy may be updated from time to time. Material changes will be reflected by updating the effective date above.

TipMeL8r is a brand built by Online Media Interactive, LLC, based in Atlanta, GA. Questions about your data? Email hello@tipmel8r.example.com.