Privacy Policy

1. Account data

When you register we collect email, username, password (hashed), language preference, and optional profile fields (bio, avatar, public member page settings).

2. Listing & auction data

Job titles, descriptions, categories, photos, bid amounts, auction status, and chosen provider records.

3. Location data

City, address or map coordinates you provide for jobs. Map display uses Mapbox — see section 8 for third-party sharing.

4. Messages

In-platform chat between posters and providers, including timestamps and read status, stored to support transactions and disputes.

5. Technical data

IP address, browser type, device information, logs, and cookies needed for authentication, security, and analytics.

6. Service delivery

We process data to operate reverse auctions, show jobs on the map, process payments, send notifications, and display public member profiles you enable.

7. Safety & disputes

We may review messages and listing content to prevent fraud, enforce terms, and resolve disputes — including AI-assisted summarisation of dispute evidence.

8. Legal bases (GDPR)

We rely on: contract performance (running your account and transactions), legitimate interests (security, improvement), legal obligation, and consent where required (e.g. optional marketing).

9. Trilingual interface

Your selected language (PL / UA / EN) is stored to serve the correct UI and communications. We do not infer ethnicity from language choice.

10. Other users

Usernames, public profiles, listings, and bids visible to other users as part of the marketplace. Exact addresses may be hidden until a bid is accepted — see product settings.

11. Service providers

We use trusted processors under data processing agreements:

• Stripe — payment processing and Connect payouts (USA/EU).
• Mapbox — map tiles and geocoding.
• Hosting and email infrastructure within the EU where possible.

12. AI tools

Dispute summaries may be sent to third-party AI APIs with minimised personal data. We do not use your data to train public models without consent.

13. Legal disclosure

We may disclose data when required by law, court order, or to protect rights, safety, and property of TipTap LTD, users, or the public.

14. Payment data

Stripe collects card details, billing address, and identity verification for Connect accounts. Stripe's privacy policy applies to payment data: stripe.com/privacy.

15. Transaction records

We retain escrow status, amounts, fees, payout IDs, and dispute outcomes for accounting, tax, and legal compliance.

16. GDPR rights

You may request access, correction, deletion, restriction, portability, or object to processing. Email privacy@tiptap.cy with your account email. We respond within 30 days where required.

17. Cookies

Essential cookies run sessions and security. We minimise non-essential tracking. You can control cookies in your browser; some features may not work without essential cookies.

18. Children

TipTapp PL is not directed at under-18s. We delete accounts if we learn a user is under 18.

19. International transfers

Data may be processed outside the EEA (e.g. Stripe, Mapbox) with appropriate safeguards such as Standard Contractual Clauses.

20. Retention

We keep account and transaction data while your account is active and for up to 7 years after closure where law or accounting requires. Messages and dispute records may be retained for the same period.

21. Changes

We update this policy on this page. Significant changes will be noted with a new effective date.

22. Contact

Data controller: TipTap LTD · privacy@tiptap.cy · For GDPR requests include your registered email and username.