Tipsy To Go

Effective date: August 2, 2026 · Last updated: August 2, 2026 This Privacy Policy explains how Tipsy ToGo, Inc. ("Tipsy ToGo," "we," "us") collects, uses, shares, and protects personal information across all of our systems: our website tipsytogobar.com, our mobile app, our booking and proposal pages, and the internal business systems that support them (collectively, the "Services"). It applies to customers, event guests whose information we're given, vendors/partners, and website visitors. 1. Information we collect • You provide: name, email, phone, billing/shipping and event addresses, event details and preferences, account credentials, messages you send us, and (for vendors) business name, services, and pricing. • Payment & banking: payment card details are collected and processed directly by Stripe — we receive limited transaction data (e.g., confirmation, last four digits), not full card numbers. Where bank linking is used, Plaid securely handles account credentials. • Automatically: device and usage data, IP address, browser/app identifiers, and cookies or similar technologies (see Cookies below); approximate or precise location where you enable it (e.g., for delivery/field operations). • From others: service providers (e.g., analytics, mapping, enrichment) and, for age/ID verification, information confirmed at delivery. • Sensitive/regulated data: for staff/contractors only, we process government IDs and payroll/tax data in our internal systems; this is not collected from customers through the Services. 2. How we use information To provide and operate the Services (bookings, events, delivery, payments, payouts); to verify age and identity for alcohol service; to communicate with you (service messages, follow-up, reminders, and — with consent — marketing); to personalize and improve the Services; to maintain security, prevent fraud, and enforce our Terms; and to comply with legal, tax, and regulatory obligations. 3. Legal bases (where GDPR/UK GDPR applies) Performance of a contract (providing the Services), consent (e.g., marketing, SMS, precise location), legitimate interests (securing and improving the Services, B2B outreach), and legal obligation (tax, alcohol-service, and records requirements). 4. Text messages (SMS) By providing your mobile number and opting in, you consent to receive text messages from Tipsy ToGo related to your events, bookings, account, lead follow-up, appointment reminders, and — where you have separately opted in — promotional offers. Consent to receive texts is not a condition of purchase. • Message frequency varies based on your activity. • Message and data rates may apply, per your carrier plan. • Reply STOP to opt out at any time (one-time confirmation, then no further texts unless you opt in again). Reply HELP for help, or contact admin@tipsytogobar.com. • Carriers are not liable for delayed or undelivered messages. • We do not share your mobile opt-in or consent with third parties for their own marketing. Messages are transmitted through our provider (Twilio) solely to deliver what you requested. Your consent is captured and time-stamped when you provide your number. 5. Cookies & tracking We use cookies and similar technologies for authentication, preferences, analytics, and (where applicable) measurement. You can control cookies through your browser and, where offered, our cookie controls. Where required, we obtain consent for non-essential cookies. 6. How we share information — service providers & sub-processors We do not sell your personal information. We share limited data with trusted providers ("sub-processors") who process it on our behalf under data-protection agreements, each receiving only what its function requires: • Stripe — Payment processing & payouts (PCI DSS Level 1). We don't store full card numbers. • Plaid — Bank-account linking & ACH transfers. Also subject to Plaid's End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy). • Twilio — SMS/text delivery. • Twilio SendGrid — Transactional & marketing email. • Supabase / Amazon Web Services (AWS) — Cloud hosting, database, encrypted storage. • Google / Firebase — Mobile app authentication, notifications, real-time data, analytics. • Google Maps Platform — Location, mapping, and local vendor discovery for events. • Apple / Google / Meta — App distribution, sign-in, and advertising measurement. • OpenAI / Anthropic — Optional AI assistant features. Prompts are limited to what a request needs and are not used to train these providers' models; no payroll, banking, or government-ID data is sent to AI providers. • Hunter / Prospeo — Business-contact discovery/verification for vendor sourcing (B2B). • Ayrshare — Social media publishing (our own marketing). • Gusto — Payroll processing (staff/contractors), where used. • Progression — Partner platform for team goals and onboarding (staff). We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a business transaction (e.g., merger). Vendors and event partners receive only the information necessary to fulfill your event — not full profiles or payment data. 7. Data retention We keep personal information only as long as needed for the purposes described, or as required by law (e.g., financial and tax records are retained for the legally required period). When no longer needed and no legal hold applies, data is securely deleted or irreversibly anonymized. See our Data Retention & Disposal Policy for details. 8. Your privacy rights Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information, to opt out of marketing, and to withdraw consent. California residents (CCPA/CPRA) have the right to know, delete, correct, and to opt out of "sale"/"sharing" — we do not sell personal information — and the right not to be discriminated against for exercising these rights. To exercise any right, contact admin@tipsytogobar.com; we will verify and respond within the time required by law (generally 45 days under CCPA, 30 days under GDPR). Because your data may exist in more than one of our systems (website, app/Firebase, and internal systems), a deletion or export request is applied across all of them. 9. Security We protect information with encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, multi-factor authentication for privileged access, application-layer encryption of the most sensitive identifiers, signature-verified integrations, and audit logging, as described in our Information Security Policy. No system is perfectly secure, but we work to protect your data and to notify you and regulators of breaches as required by law. 10. Children The Services are intended for adults. Alcohol-related services require users to be 21+. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, contact us and we will delete it. 11. International users We operate in the United States; if you access the Services from outside the U.S., your information may be transferred to and processed in the U.S. Where required, we use appropriate safeguards for international transfers. 12. Changes to this Policy We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you. 13. Contact Tipsy ToGo, Inc. — admin@tipsytogobar.com. For security concerns, security@tipsytogobar.com.