merci.
Privacy Policy
Last updated 28 September 2026 · Merci website and mobile apps
Merci is a hotel tipping and gratuity operations service provided by Symphia LLC. This policy explains how Merci handles personal information when hotel teams manage staff, tip links, gratuity allocations, and payroll records, and when guests use a hotel’s tip link.
Our role and your hotel’s role
Symphia manages its own account, support, security, and business records. Your hotel decides how its staff roster, property access, gratuity allocations, and payroll information are managed. When we process those records for a hotel, we act on that hotel’s instructions. The hotel’s own privacy and employment notices also apply.
Information Merci handles
- Accounts and staff profiles: name, email address, account and employee identifiers, property memberships, roles, and payroll identifiers supplied by the hotel.
- Gratuity and payroll records: tip amounts, transaction references and statuses, allocations, tip pools, payroll batches, and confirmation records. These records may identify the staff members to whom an allocation belongs.
- Hotel operations: departments, room and staff assignments, tip-link labels, and settings entered by authorized hotel users.
- Security and support: sign-in and session records, audit events for privileged actions, technical request information including IP addresses used for security and rate limiting, and information you provide when contacting support.
The Android app does not request access to device contacts, location, camera, microphone, or your photo library. It contains no advertising or third-party analytics SDK. Signing in and making authorized changes sends the relevant account and operational information to Merci over an encrypted connection. Session credentials are protected using Android’s device Keystore.
Payments and payroll
Where a hotel has enabled payment collection, payment entry takes place on Stripe-hosted pages. Merci’s native app does not ask you to enter raw card or bank details. Merci retains the transaction references and status information needed to maintain gratuity records. Payment availability depends on the hotel’s configuration and provider readiness; employee distributions are managed through the hotel’s payroll process.
How information is used and shared
We use information to operate Merci, authenticate users, enforce property and role permissions, maintain gratuity and payroll records, provide support, and prevent fraud and unauthorized access. Authorized hotel administrators can access their property’s records; employees can access their own earnings and profile according to their assigned permissions.
Service providers process information needed to provide hosting, transactional email delivery, and enabled payment services under contractual data-protection obligations. These include Amazon Web Services for hosting, Google Workspace for transactional email, and Stripe for enabled payment services. Connected hotel systems receive information only through configured integrations. We may also disclose information when required by law or to protect the security and integrity of the service.
We do not sell personal information or share it for cross-context behavioral advertising. Merci does not use gratuity or payroll records to train AI models.
Retention and security
We retain account information while it is needed to provide the service and handle support and security matters. Hotel records are retained according to the hotel’s instructions and applicable obligations. Transaction, payroll, audit, and security records may need to be retained to meet legal obligations, resolve disputes, and prevent fraud. When information is no longer needed, it is deleted or de-identified in the ordinary course, subject to those obligations.
Merci uses encrypted connections, property-scoped access controls, protected sessions, and audit records. Information may be processed in the United States or other countries where Symphia and its service providers operate, as described in the Symphia Privacy Policy.
Your choices and deletion requests
Contact support@symphia.ai to request access, correction, or deletion of your personal information. We may verify your identity. For hotel-managed information, we will support the hotel in responding, and you can also contact your hotel administrator.
To delete your Merci account and associated personal information, follow the steps on our Request account deletion page. You do not need to sign in. Removing property access or signing out does not itself delete the account. We will explain any records that must be retained and any applicable limits when responding to your request.
Children and third-party services
Merci’s team app is intended for adult hotel staff and managers and is not directed to children. External websites and payment pages have their own privacy practices. Contact us if you believe a child has provided information to Merci.
Contact and policy updates
Questions about Merci’s handling of information can be sent to support@symphia.ai. We will update the date above when this policy changes and provide notice of material changes where required.