Privacy Policy

This Privacy Policy describes how CrabLion LLC ("CrabLion," "we," "us," or "our") collects, uses, and shares information when you use QRTipJar, including our website, business and staff dashboards, public tip pages, and related services.

1. Information We Collect

Information you provide:

• Contact details, such as email address
• Profile details, such as display name, business name, role, public handle, and avatar
• Business account details, including selected plan and staff-management data
• Messages and support requests sent to us

Payment and payout related information:

• Billing and subscription metadata from Stripe for business plans
• Connected-account status data for staff payout onboarding (Stripe Connect)
• Tip transaction metadata (for example amount, status, timestamps, and provider IDs)
• Tip sender-provided optional fields such as name or short message

Technical and usage information:

• IP address, browser type, device information, and approximate geolocation
• Pages viewed, timestamps, and interaction events needed for service operation and security
• Session identifiers, authentication state, and security logs

2. How We Use Information

We use information to:

• Operate, secure, and improve QRTipJar
• Create and manage business and staff account experiences
• Enable tipping flows, staff pages, and business dashboard features
• Process subscription billing and payout onboarding through payment partners
• Send transactional communications (verification codes, login links, invitations, and account notices)
• Detect fraud, enforce platform rules, and comply with legal obligations

We do not sell personal information. We do not use personal data for third-party ad targeting.

3. How We Share Information

We share information only as needed to run the Service, including with:

• Supabase for authentication and database infrastructure
• Stripe for subscription billing, payment processing, and payout onboarding
• Postmark for transactional email delivery
• Cloudflare for edge delivery, security, and route handling
• Railway for backend hosting infrastructure

We may also share information when required by law, to respond to valid legal process, to enforce our Terms, or to protect users, our services, or the public.

4. Public Information

Certain information is intentionally public, such as business/staff public handles and public tip-page profile details. If you provide optional tip messages or names, those may be visible to recipients according to product settings.

5. Data Retention

We retain information for as long as necessary to provide the Service, support security and fraud prevention, satisfy accounting and legal obligations, and resolve disputes. Retention periods may vary by data type and legal requirement.

6. Cookies And Session Technologies

We use cookies and similar technologies that are necessary to run core functionality, including session management and security checks. Disabling required cookies may prevent login and dashboard access from working properly.

6A. SMS Messaging Privacy

If you opt in to receive SMS messages from QRTipJar, we collect and process your mobile number, consent status, consent timestamp, and message-delivery metadata needed to operate the messaging program.

• SMS messages are used for account alerts, onboarding updates, and service-related notifications you agreed to receive.
• Message frequency varies by account activity.
• Message and data rates may apply based on your wireless plan.
• You can opt out at any time by replying STOP to any message.
• You can request help by replying HELP to any message.

We do not sell SMS opt-in data and do not share your mobile number for third-party marketing purposes.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Processing

Your information may be processed in countries other than where you live, including the United States, where our systems and providers operate. Data-protection laws in those countries may differ from laws in your jurisdiction.

9. Your Rights And Choices

Depending on your location, you may have rights to access, correct, delete, or request a copy of your personal information, and to object to or limit certain processing. You may also update core profile data from your account where available.

To submit a privacy request, contact hello@qrtipjar.com.

10. California Notice

If you are a California resident, you may have rights under applicable California privacy laws, including rights to know, delete, and correct personal information, and to non-discrimination for exercising rights. We do not sell personal information.

11. Children's Privacy

QRTipJar is not intended for children under 18, and we do not knowingly collect personal information from children under 18.

12. Changes To This Policy

We may update this Privacy Policy from time to time. If changes are material, we will post an updated notice and revise the "Last updated" date above.

13. Contact Us

Questions or requests about privacy: hello@qrtipjar.com

CrabLion LLC · Tucson, Arizona · United States