Privacy Policy.

1. Introduction

Tillify ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the New Zealand Privacy Act 2020.

"Personal information" is any information about an identifiable person.

2. Information we collect

We collect personal information in two primary categories:

A. Merchants (Our customers)

If you use Tillify to receive payments, we collect:

• Contact Details: Name, email address, and phone number.
• Account Information: Login credentials and account settings.
• Business Information: Business name and bank account details (for receiving payments).
• Interactions: Records of your communications with our support team.

B. Payors (People making payments)

If you are making a payment via a Tillify QR code, we collect:

• Transaction ID, amount, and date/time of payment.
• Email address (if provided for a receipt).
• Any notes or special instructions you provide to the Merchant.

3. Purpose of collection

We collect and use personal information for the following purposes:

• Facilitating Payments: To facilitate secure bank-to-bank transfers or credit/debit card payments between Payors and Merchants.
• Communication: To send payment confirmations, receipts, and order notifications.
• Account Management: To manage Merchant accounts and provide technical support.
• Security: To protect our systems and users from fraud and unauthorized access.

4. How we collect information

We collect information directly from you when you:

• Register for a Tillify account.
• Initiate or complete a payment through our platform.
• Contact us for support or inquiries.

5. Information sharing & disclosure

We do not sell your personal information. We share information with trusted service providers only as necessary to provide our services:

• Akahu: For bank-to-bank transfers. Akahu processes information to facilitate the payment on your behalf.
• Stripe: For credit and debit card processing.
• Resend: For sending automated emails and receipts.
• Cloud Providers: For secure data storage (e.g., Supabase/AWS).

6. Data security

We take reasonable measures to keep your personal information secure, including:

• Strict access controls for our staff.
• Regular security reviews of our infrastructure.

7. Data retention

We only retain personal information for as long as it is required for the purposes for which it was collected or as required by law. When information is no longer needed, we securely delete or anonymise it.

8. Your rights

Under the Privacy Act 2020, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of your personal information if you believe it is inaccurate.

We will respond to your request in accordance with the Privacy Act 2020. To exercise these rights, please contact our Privacy Officer at the email in section 11.

9. Privacy officer

We have appointed a Privacy Officer responsible for overseeing our compliance with privacy laws. Any inquiries or complaints regarding privacy should be directed to them.

10. Privacy breaches

In the event of a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, and generally within 72 hours of becoming aware of the breach.

11. Contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@tillify.nz