Who operates Tiplume
The Tiplume website and creator tools are operated by Zentra3DLtd OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145, Estonia. For the purposes of applicable data-protection law, this operator is the controller of personal data described in this policy, unless we state otherwise for a specific processing activity.
How to contact us
Questions about this policy, your information or your rights can be sent through the contact form or by email at info@tiplume.com. Please include enough detail for us to identify your account or request.
Data we collect
Depending on how you use Tiplume, we may process:
- Account and creator profile data — such as email address, display name, handle, bio, creator type, avatar and cover images, social and link widgets, published page content, goal settings, streaming settings, and business or seller profile details you choose to provide.
- Supporter and support-activity data — such as supporter display name and message if supplied, support amount, fee snapshot, payment status, linkage to a public goal where applicable, and tokens used to show public support status.
- Checkout payer details — when you support a creator, we ask for identity and contact fields required to initialize hosted card checkout (such as email, name, date of birth, country and address fields). These details are transmitted to the payment service provider to start checkout. They are not stored on Tiplume support records as standing payer profiles. Raw card numbers and card security codes are entered only on the secure hosted checkout and are not collected by Tiplume.
- Professional tools data — such as client records, simple requests, invoice drafts and related notes you save in the product.
- Communications — information you send through contact or feedback forms, support correspondence, and transactional emails related to your account or payments.
- Technical and security data — such as IP address, device and browser type, request logs, authentication session data, abuse-prevention counters, and similar operational records.
Why we use data and legal bases
We use personal data to:
- provide accounts, creator pages, support payments, goals, activity, stream tools and professional tools;
- process supporter payments through our payment provider and reconcile transaction status;
- display supporter messages and activity according to creator settings and product rules;
- respond to you and send service-related communications;
- keep the service secure, prevent fraud and enforce our terms;
- comply with legal obligations and establish, exercise or defend legal claims.
Where the GDPR applies, we rely on one or more of the following legal bases, depending on the activity: performance of a contract, legitimate interests (such as security and service improvement), legal obligation, and consent where required (for example, for optional communications or non-essential cookies if we introduce them).
Service providers and sharing
We use trusted providers to run Tiplume. They process data only on our instructions and for the purposes described here. Current categories include:
- Hosting and infrastructure (for example Vercel) — to serve the application and related edge delivery.
- Database, authentication and storage (for example Supabase) — to store account, creator, support and operational data and to manage sign-in sessions.
- Payment processing (hosted payment service provider) — to provide hosted card checkout, authorization and transaction status for supporter payments.
- Transactional email (for example Brevo) — to send account and service emails you request or that are necessary to operate the service.
We do not sell your personal data. We do not use an advertising network on this product. Creator pages may link to third-party sites; those sites have their own privacy practices.
International transfers
Providers may process data in the European Economic Area and in other countries. Where personal data is transferred outside the EEA, we use appropriate safeguards required by applicable law, such as standard contractual clauses or equivalent mechanisms, where they apply.
Retention
We keep information only as long as needed for the purposes above, including:
- Account and profile data — while your account exists and for a reasonable period afterward where needed for security, disputes or legal obligations.
- Support and payment records — as needed for payment reconciliation, fraud prevention, chargebacks, accounting and legal compliance.
- Professional tools records — while you maintain them in the product and as required for legitimate operational or legal needs.
- Logs and security data — for limited periods appropriate to security monitoring and troubleshooting.
Security
We use technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure. Card payments are completed on the secure hosted checkout; Tiplume does not store full card details.
Your rights
Depending on where you live, including if the GDPR applies to you, you may have rights to access, rectify, erase, restrict or object to certain processing, and to data portability. Where processing is based on consent, you may withdraw consent without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with a competent supervisory authority. Rights are subject to applicable legal conditions and exceptions. Contact us to exercise rights that apply to you.
Account deletion and erasure
You may request deletion of your account or erasure of personal data through the contact channels above. We will honour requests that apply to you, but we may retain certain information where required or permitted by law (for example payment records, fraud prevention or legal claims).
Minors
Tiplume is intended for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data to us, contact us so we can take appropriate steps.
Cookies and similar technologies
We use cookies and similar technologies for authentication, security and limited functionality. See our Cookie policy for details. We do not use advertising cookies on the product today.
Changes to this policy
We may update this policy when our practices or legal requirements change. Material changes will be reflected in the “Last updated” date at the top of this page.