Tips Privacy Policy
Supplementary Privacy Notice for Payers Using the RESTOBOT Tips Service
Scope of this document.
This Tips Privacy Policy applies only to the personal data of a Payer (the guest leaving a tip) processed through the RESTOBOT Tips Service described at www.restobot.pro/tips. It does not replace, and is supplementary to, RESTOBOT's general Privacy Policy, available at www.restobot.pro/privacy-policy, which governs RESTOBOT's processing of personal data across the wider RESTOBOT Platform (online menus, Telegram Bot, table reservations, loyalty cards, and other features). This document does not describe how Workers' (tip recipients') or Venues' (restaurant partners') personal data is processed; that is addressed in separate notices.
1. Who processes your data
RESTOBOT registered in Warsaw, Poland, NIP 1133092409, REGON 524951267, email [email protected] ("RESTOBOT," "we," or "us"), is the data controller for the personal data described in this Tips Privacy Policy, except where stated otherwise below.
2. Definitions
Tips Service – the functionality, available at subdomains and pages of restobot.pro, that allows a Payer to leave a voluntary cashless Tip directly to a Worker by scanning a QR code or following a payment link.
Payer – the guest who uses the Tips Service to leave a Tip. This Policy concerns the Payer's personal data only.
Worker – the individual (e.g., a waiter, bartender, or barista) who receives the Tip.
Venue – the restaurant, café, bar, or other hospitality establishment, operating as a RESTOBOT Partner, where the Worker provides services.
Stripe – Stripe Payments Europe, Ltd. and its affiliates, the licensed payment institution that processes the Tip payment. Stripe's privacy policy is available at https://stripe.com/privacy
3. What data we process about you, and why
As a Payer, the personal data RESTOBOT processes about you through the Tips Service is limited to the following:
Transaction data
The amount of the Tip, the date and time of the transaction, the Worker and Venue to which it was paid, and a technical transaction identifier. We process this to operate the Tips Service and to be able to investigate a complaint if one is raised.
Legal basis: performance of a contract with you (GDPR Art. 6(1)(b)) – i.e., carrying out the Tip payment you requested.
Payment data
Your card number or other payment method details are entered directly into Stripe's payment interface and are not collected, seen, or stored by RESTOBOT. RESTOBOT receives only confirmation that a payment succeeded or failed, together with a payment reference.
Legal basis: not applicable to RESTOBOT, as RESTOBOT does not process this data; see Section 4 regarding Stripe.
Optional feedback data
If the Tips Service allows you to leave a rating or a comment, and you choose to do so, we process the content of that comment and, if you voluntarily include it, your name. This is entirely optional.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)), since submitting feedback is a feature you actively choose to use.
Technical data
Standard web request data such as IP address, browser type, device type, and similar log data generated when you load the Tips Service page, processed for security and to keep the Service functioning correctly.
Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in keeping the Service secure and operational.
We do not require you to register an account, provide your name, or provide your phone number or email address in order to leave a Tip.
4. Stripe as an independent controller
Your payment details are processed directly by Stripe, which acts as an independent data controller, not as a processor acting on RESTOBOT's instructions, for the purposes of processing your payment and complying with its own legal obligations (including AML/KYC requirements applicable to Stripe as a regulated payment institution).
This means that, in addition to this Tips Privacy Policy, your personal data relating to the payment itself is also subject to Stripe's own privacy policy, available at https://stripe.com/privacy We encourage you to review it.
5. Who we share your data with
- Stripe – to process the Tip payment, as described in Section 4.
- The Worker and, where applicable, the Venue – the Worker necessarily sees that a Tip was received and its amount, since the Tip is paid directly to the Worker's own Stripe-connected account; if you leave a public comment or rating, the Venue may also see its content, where the Venue has enabled that feature.
- IT and hosting providers acting on RESTOBOT's behalf (e.g., cloud hosting) under data processing agreements compliant with the GDPR, solely to operate the technical infrastructure of the Tips Service.
- Authorities and regulators, where required by applicable law (for example, tax or AML authorities) or in response to a lawful request from a court or supervisory authority.
We do not sell your personal data, and we do not use it for advertising purposes.
6. How long we keep your data
Transaction data (the fact and amount of a Tip, date, and reference) is retained for as long as necessary to handle potential complaints and to comply with applicable accounting and tax retention obligations, and in any event for no longer than 5 years from the date of the transaction, unless a longer period is required by applicable law.
Optional feedback or comment content is retained for as long as it remains displayed on the relevant Worker's tipping page, or until you request its removal by contacting us, whichever is earlier.
Technical log data is retained only for the period necessary for security and troubleshooting purposes, typically not exceeding 90 days, after which it is deleted or anonymised.
Please note that RESTOBOT does not control Stripe's own retention periods for payment data; these are governed by Stripe's privacy policy and applicable financial regulation.
7. International transfers
RESTOBOT processes the personal data described in this Policy within the European Economic Area (EEA). Where a service provider involved in delivering the Tips Service is located outside the EEA, or where Stripe's own infrastructure involves a transfer outside the EEA, such a transfer takes place only on the basis of appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses.
8. Your rights
Under the GDPR, as a Payer you have the right to:
- request access to the personal data RESTOBOT holds about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data, where there is no legal basis for RESTOBOT to keep it;
- request restriction of processing in certain circumstances;
- object to processing based on legitimate interest;
- receive your data in a structured, machine-readable format, where technically feasible;
- lodge a complaint with a competent data protection supervisory authority – in Poland, the Prezes Urzędu Ochrony Danych Osobowych (UODO).
Because RESTOBOT generally does not collect identifying information from Payers (see Section 3), exercising some of these rights may require you to provide the approximate date, amount, and Venue of the Tip so that we can locate the relevant transaction record.
To exercise any of these rights, contact us at [email protected].
9. Cookies and similar technologies
The Tips Service page uses only the technical cookies or equivalent local storage strictly necessary for the page to function (for example, to keep you on the correct payment session). These do not require your consent under applicable ePrivacy rules.
If RESTOBOT introduces analytics or marketing cookies on the Tips Service pages in the future, this Policy will be updated accordingly, and consent will be requested where required by law.
10. Changes to this Policy
We may update this Tips Privacy Policy from time to time, in particular to reflect changes to the Tips Service or to applicable law. The version in force is the one published at www.restobot.pro/tips/privacy at the time you use the Service.
Contact
RESTOBOT
Warsaw, Poland
NIP: 1133092409 | REGON: 524951267
Email: [email protected]
Effective date: 02.07.2026