Privacy
Privacy Policy
Last updated: July 2026. This page explains how Tipper processes your personal data under the GDPR.
Data controller
CGA FR, sole trader (brand "Tipper"), 65 avenue du Louvre, 78000 Versailles, France. Contact: contact@tipper.fr.
Data we collect
- Identity: first and last name, date of birth.
- Contact: email address, phone number.
- Identity documents and, depending on the transport mode used, vehicle documents (KYC): ID card, passport or residence permit; where applicable, driving licence, vehicle registration (carte grise) and insurance certificate.
- A payment account via Stripe for the expense contribution.
Purposes and legal bases
- Tipper sign-up and identity verification (performance of contract, legal obligation).
- Account login by email link and WhatsApp code (performance of contract).
- Settlement of the expense contribution (performance of contract).
- Legal compliance and fraud prevention (legal obligation, legitimate interest).
Processors and recipients
- Amazon Web Services (hosting, eu-west-3 region, European Union).
- Stripe (payments and KYC verification).
- Meta Platforms / WhatsApp (delivery of verification codes).
- Amazon SES (transactional email).
Prospects and contact requests
When you fill in a contact form, an information request or a waitlist sign-up, we process the following data:
- Name.
- Email address.
- Phone number.
- Organisation or business, where applicable.
- City.
- The message you send us.
This data is used to respond to your request and, if you wish, to let you know when the application launches. The legal basis for this processing is your consent, which you may withdraw at any time. This information is intended for the Tipper team only: it is neither resold nor used for marketing unrelated to your request. It is anonymised after eighteen (18) months of inactivity. You have the right to access, rectify and erase this data; to exercise it, email contact@tipper.fr. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
Retention
Account data is kept while the account is active. After closure it is deleted or anonymised, except where law requires retention (accounting and supporting records kept for the applicable statutory period). Identity documents are not kept beyond what is necessary for verification and legal obligations.
Your rights
You have the right to access, rectify, erase, port, restrict and object. To exercise them, email contact@tipper.fr. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).