Draft for review. This page has not yet been reviewed by a solicitor.
Privacy at Tilltide
Tilltide is run by Bytez3 (registered office: 128 City Road, London). Contact: info@bytez3.com. Last updated 21 October 2026.
Who this is for
Tilltide is a till and back-office app for independent shops. This page explains what Tilltide keeps about shop owners and staff, and about customers who pay a Tilltide shop.
For a shop's own sales records, the shop decides what happens with them, and Tilltide processes them for the shop. For loyalty codes and receipts, Tilltide is responsible for that information itself.
What we keep, and why
| What | Why | How long |
|---|---|---|
| Shop details: name, till wallet address, owner wallet address, PayPal merchant id or email, settings | To run the till and pay the shop | While the shop uses Tilltide, then 6 years for accounting |
| Each sale: amount, time, how it was paid, the customer's wallet address or PayPal payer id, points earned and spent | To take payments, give loyalty points, produce reports and handle refunds | 6 years (UK accounting records) |
| Loyalty codes for PayPal customers | So customers can spend their points | Until the customer or the shop asks us to delete it |
| Sign-in sessions and staff device names | Security | 30 days, or until signed out |
| Questions asked to the AI assistant | To answer them | Not stored by Tilltide after the answer |
We don't collect customers' names, email addresses or card numbers. Card and PayPal details stay with PayPal.
Who else sees it
- PayPal: processes PayPal and card payments and refunds.
- The Solana blockchain: wallet payments, loyalty points and transfers are recorded publicly onchain. Anyone can see a wallet address and its transactions; this can't be deleted.
- Anthropic (Claude): answers the shop owner's questions and writes end-of-day notes. It sees sales data, including wallet addresses and PayPal payer ids, for that purpose only.
- Our hosting providers: Railway (servers and database) and Cloudflare (network security).
We don't sell data or use it for advertising.
Your rights
Under UK GDPR you can ask to see, correct or delete what we hold about you, or object to how we use it. Email info@bytez3.com.
Information recorded on the blockchain can't be deleted by anyone. If you are a customer, the shop you paid may need to keep its sales records for accounting.
You can complain to the Information Commissioner's Office (ico.org.uk).
Cookies
Receipts and these pages use no cookies or tracking. The app stores your sign-in on your device.