Skip to content

Privacy policy

What we collect, why we need it, and the choices you have.

Effective and last updated: 2 November 2026

1. Who we are and how to contact us

Tipdrum is a creator monetisation platform for tips, digital and physical products, memberships, courses, bookings, events, hackathons and fundraising projects. The Tipdrum team operates the platform and is responsible for the personal information we process to run it. This policy covers our website, app, creator pages, checkout and embedded tools.

For privacy questions or requests about your information, email [email protected] with “Privacy request” in the subject. Our Terms of service describe the rules for using Tipdrum.

2. Information we collect

The information we collect depends on how you use Tipdrum. Some fields are necessary to provide a requested service; optional profile information is identified in the relevant form.

  • Account information: your name, email address, password hash if you use a password, profile photo, account preferences and security settings. Authenticator secrets and recovery information are protected separately.
  • Creator and business information: username, public profile, biography, links, uploaded work, offers, prices, business or tax details supplied for invoices, and payment-verification requests and status.
  • Payment and order information: tips, purchases, memberships, project pledges, amounts, currencies, payment references and status, invoices and shipping addresses for physical orders. Payout methods include an account name, bank or mobile-money provider and account or phone number. Recurring payments may use a payment-provider authorisation reference.
  • Booking information: your name and email, project brief, preferred dates, timezone, appointment details, delivery files, approvals, messages and dispute information.
  • Event and hackathon information: registration and waitlist details, answers to organiser questions, tickets, transfers, check-in status, eligibility and rules confirmations, teams, project submissions, judging and confirmed public-choice votes.
  • Learning and community information: course enrolments, lesson-completion records, memberships, comments, reviews, supporter messages and creator replies.
  • Audience information: follows, contact details associated with your purchases or participation, related activity and totals, referral codes, email preferences, follow confirmations and unsubscribe records.
  • Communications and reports: information you send to support or submit in an account report, including your email, the reported username, selected category, details and any content link.
  • Technical information: IP address, browser or device information, security and request logs, session information and page-view information needed to operate, secure and understand the service.

3. Google sign-in and Google user data

If you choose “Continue with Google”, we request only the openid, email and profile permissions. Google provides your Google account identifier, email address and email-verification status, and, when available, your name and profile-picture URL. We verify the sign-in credential with Google on our server.

We use this information only to authenticate you, create or connect your Tipdrum account, recognise you on future sign-ins and populate your account name and photo. We store the Google account identifier, email, name and photo URL on your Tipdrum account as applicable. Google sign-in credentials are used during verification; we do not store Google access or refresh tokens for ongoing access to your Google account.

We do not request access to Gmail, Google Drive, Google Calendar, contacts or other Google account content. We do not sell Google user data, use it for advertising, use it to train general-purpose AI models or share it with data brokers. Service providers may process the minimum account information needed to operate Tipdrum under our instructions; disclosures may also be necessary for security or legal obligations as described below.

Tipdrum’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

Google sign-in is optional; email and password registration is available. You can revoke Tipdrum’s Google access in your Google Account connections. Revoking access stops future Google authorisation but does not itself delete your Tipdrum account or information already stored. To delete that information, request deletion in Account settings or email support. Set a Tipdrum password in Account settings first if you want to keep using Tipdrum without Google sign-in.

4. How and why we use information

We use personal information to create and secure accounts, publish the content you choose to make public, process and record payments, deliver purchases and tickets, manage bookings and subscriptions, send essential service messages, respond to support requests and review abuse reports.

We also use limited service and activity information to understand performance, provide creators with analytics, prevent fraud and improve reliability. Optional audience or marketing messages use the preferences and unsubscribe controls available for those messages.

Our reasons for processing include providing the service or contract you request, meeting legal obligations, protecting legitimate interests such as security and fraud prevention, and your consent where required. You may withdraw consent for optional processing without affecting prior lawful processing.

5. Who receives information

We share information only where needed for the purposes described here. We do not sell personal information.

Creators and organisers receive information needed to fulfil your purchase, booking, membership or event participation, such as your name, contact details, order details, submitted messages and shipping details where relevant. Information you choose to publish on a creator page or public supporter message can be seen by other visitors. Private account security information is not part of your public profile.

Comments and reviews show your submitted name and content to the people who can access the relevant page or thread; commenter emails are available to the creator for moderation but are not included in public comment responses. Public hackathon galleries, team information and leaderboards display the project or participation information made public by that feature. Private lesson and membership discussions remain subject to access checks.

Creators can view and export their own audience and transaction records and send audience messages through Tipdrum. Their use of information outside Tipdrum is their responsibility and must comply with applicable law. Unsubscribe links stop the optional messages they apply to; essential purchase, access and security messages may still be sent.

If a creator enables Connections, Tipdrum can send tip, sale or new-membership notices to that creator’s Discord or HTTPS webhook destination. Generic webhook notices can include the payment reference, amount, name, email and message; private-supporter names, emails and messages are omitted. Discord notices omit email addresses. The creator is responsible for the destinations they connect and how they use the information received.

Service providers process information to provide hosting, storage, transactional email, authentication and payment services. These include Google for Google sign-in, Resend for configured email delivery, DigitalOcean for configured hosting or file storage, and Paystack for supported live payments. The providers used depend on the feature and deployment. Payment providers handle payment credentials in their own checkout; Tipdrum records transaction references and status rather than full card numbers or security codes.

Team review requests, such as account-deletion requests, may also pass through a configured private Slack alert or server log. These alerts contain the account information and request context needed by the team. Current payment-verification requests notify the team by email; that request form does not collect identity-document uploads.

Account reports are sent to the Tipdrum team’s reports inbox through our email service. We use the reporter email to follow up. We do not publish reports or routinely disclose the reporter’s email to the reported account. We may need to share relevant information to investigate a report, protect someone’s safety, comply with a lawful request or defend legal rights.

If the business is reorganised or transferred, relevant information may transfer with the service, subject to appropriate protections and any notices required by law.

6. Cookies and analytics

We use essential session and security cookies to keep you signed in and protect forms from unauthorised requests. Browser storage may remember preferences and dismissed notices. Blocking essential cookies can prevent sign-in or other account features from working.

Creator page analytics do not use tracking cookies. They process an IP address and browser information to create a daily, keyed visitor identifier; the analytics record does not store the raw IP address. Daily identifiers help count visits without linking a visitor across days. Analytics may also record the page, referral domain and a referral code. Separate infrastructure and security logs may contain IP addresses.

Creator page-view tracking respects the browser’s Do Not Track setting. Some creator-selected fonts or externally hosted images make direct requests to their providers. Campaign and course video players connect to YouTube or Vimeo only when you press Play. Those services can receive your IP address and browser information and apply their own privacy policies. Opening an external link also takes you to that provider’s service.

7. Storage, retention and deletion

We keep personal information for as long as reasonably necessary to provide the service, fulfil transactions, investigate reports, resolve disputes and meet legal or accounting duties. Retention depends on the information and the purpose; we do not promise that closing an account immediately removes every record.

Account reports are currently handled by email. Report contents and contact details are held in our mail delivery systems and team inbox for review and follow-up. Submitted links are not automatically fetched by the report service. Please provide only the information needed for the report, and do not send passwords, payment credentials or illegal imagery.

Account deletion is currently a request reviewed by the Tipdrum team, not an automatic or immediate erase action. Request it in Account settings or through support. We may verify your identity and need to settle outstanding payments, orders, payouts or disputes. Financial ledger and transaction history may need to remain for accounting, fraud prevention and legal obligations; closing an account does not rewrite those records. The team handles removal or anonymisation of other information subject to lawful retention and backup cycles. Revoking Google access alone does not remove stored Tipdrum account data.

8. Security and international processing

We use safeguards such as password hashing, access controls, protected sessions and encryption for sensitive security information. Access to private information is limited to people and providers who need it for their work. No system can guarantee absolute security.

Stored payout-method details, recurring-payment authorisation references and authenticator secrets are encrypted; payout methods are displayed with masked account numbers. Purchase, booking and course-access links can grant access to private information, so keep those links private.

Tipdrum launches in Ghana, but our infrastructure, email, authentication and payment providers may process information in other countries. Where information is transferred internationally, we take steps appropriate to applicable law to protect it and limit processing to the purposes described in this policy.

9. Your privacy rights

Subject to applicable law, you may ask what personal information we hold about you, request access or correction, request deletion, object to or seek limits on certain processing, and withdraw consent where processing relies on consent. You can edit account details in Settings and unsubscribe from optional emails using their unsubscribe links.

Send requests to [email protected]. We may ask for information reasonably needed to confirm your identity. We respond within the time required by applicable law and explain any lawful limitation on a request. Required financial or dispute records may need to be retained.

In Ghana, you may also raise a concern with the Data Protection Commission under the Data Protection Act, 2012 (Act 843). This policy does not limit rights available to you under applicable law.

10. Children’s privacy and safety

Tipdrum accounts and transactions are intended for adults aged 18 and over. We do not knowingly collect personal information from children for account registration. If you believe a child has supplied personal information or is at risk on the platform, contact support or report the account so we can review and take appropriate action.

Do not upload or email sexual imagery involving children or other illegal material. Describe the concern and provide a link to where it appears. If someone is in immediate danger, contact local emergency services.

11. Changes to this policy

We will update this page as our services or data practices change and show the effective date above. We will provide notice of material changes where appropriate. If a new use of Google data requires additional permission, we will explain that use and seek the required consent before beginning it.

Privacy enquiries: [email protected].