Legal
Privacy notice
What we collect when you visit this site or ask for early access, and what we do with it. We collect as little as we can.
Last updated October 8, 2026
Draft. This page is awaiting legal review and may change.
Who we are
This site and the early-access list are run by Tillsafe (company in formation) ("Tillsafe", "we"), the controller of the personal data described here. Contact us about privacy through the early-access form.
This notice covers tillsafe.com, docs.tillsafe.com and the demo. It does not cover the Tillsafe payment service; early-access merchants get a separate agreement and notice for it.
What we collect
When you ask for early access: your work email address (required); your name, company, website, approximate monthly crypto payments, the networks you are interested in and any message (all optional); and the time you sent the form. Our firewall also processes your IP address to stop automated abuse of the form.
When you visit any page: our hosting provider records a standard access log of your IP address, browser type, the page requested, the referring page and the time.
What we do not collect. This site sets no cookies and runs no analytics, advertising or tracking scripts. It loads nothing from third-party servers. The demo uses made-up data and sends nothing to us.
Why we use it
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Reply to your request and invite you to early access | Form data | Steps you asked for before a possible contract; our legitimate interest in running early access |
| Email you about early access and the launch of the service | Email, name | The same. Every email lets you opt out |
| Keep the site and form secure, and stop abuse | Access logs, IP address | Our legitimate interest in security |
We do not sell your personal data, share it for advertising, or make decisions about you by automated means alone.
Where it is stored and who processes it
Everything is stored with Amazon Web Services (AWS) in its US East (N. Virginia) region, us-east-1. Form entries are kept in a database encrypted at rest with keys managed in AWS Key Management Service, and all traffic to the site uses HTTPS.
AWS processes this data for us as our service provider. When we email you, we use an email delivery provider acting for us in the same way; we will name it here before we send the first email. Only the people at Tillsafe who run early access can read the list.
Transfers. If you are in the European Economic Area, the UK or Switzerland, your data is transferred to the United States. We rely on the Standard Contractual Clauses in AWS's data processing terms.
We may disclose data if the law requires it, or to protect our rights or others' safety.
How long we keep it
| Data | Kept for |
|---|---|
| Early-access entry | Until you ask us to delete it, or 24 months after you joined, whichever is sooner. If you become a customer, the customer agreement takes over |
| Access logs | Up to 90 days |
| Database backups | Up to 35 days after deletion from the live database |
Your rights
Depending on where you live, you can ask us to access, correct or delete your data; to restrict or object to how we use it; to give it to you in a portable format; or to withdraw consent at any time.
If you are in California, you have the rights to know, correct and delete, and not to be discriminated against for using them. We do not sell or share personal information as the CCPA defines those terms.
Contact us through the early-access form from the address you signed up with. We reply within one month. You can also complain to your local data protection authority.
Children
This site is for businesses. It is not directed at children under 16, and we do not knowingly collect their data.
Changes
We will update the date at the top of this page when this notice changes. If a change affects data you already gave us, we will email you before it applies.