Privacy Policy

Authentication Data

• • Email address (stored in Firebase Authentication)
• • Password (hashed, never stored in plain text)
• • Email verification status

Profile Information

• • Username (unique, 4-15 characters)
• • Display name (1-50 characters)
• • Bio (0-160 characters)
• • Profile picture and banner image
• • Social media links (optional)
• • Website URL (optional)

Creator-Specific Information

• • Country (required for Stripe zone determination)
• • Payout currency preference (GBP, USD, EUR, or others)

Financial Data

• • Stripe Customer ID (for payment processing)
• • Stripe Connect Account ID (for Creators)
• • Payment card information (stored by Stripe, NOT Splitro)
• • Transaction history and payout records
• • Monthly spending totals

Group and Activity Data

• • Groups created or joined
• • Splits created or contributed to
• • Auto-Split schedules (for recurring contributions)
• • Group membership status

Information Collected Automatically

• • IP address
• • Browser type and version
• • Device type and operating system
• • Pages visited and features used
• • Date and time of access

4.1 Contractual Necessity

We process your data to provide the Service as outlined in our Terms and Conditions, including:

• Creating and managing your Account
• Processing payments and contributions
• Facilitating Group creation and membership
• Sending transactional emails (payment confirmations, receipts, security alerts)

4.2 Legitimate Interests

We process your data based on our legitimate interests, including:

• Fraud prevention and security
• Service improvement and analytics
• Customer support
• Business operations and compliance

4.3 Consent

We process your data based on your explicit consent for:

• Optional features (X/Twitter integration for milestone posts)
• Marketing communications (you can opt out at any time)

4.4 Legal Obligation

We process your data to comply with legal obligations, including:

• Tax reporting requirements
• Anti-money laundering (AML) and Know Your Customer (KYC) regulations
• Financial record-keeping requirements
• Court orders and legal processes

5.1 Core Service Provision

• • Create and manage your Account
• • Authenticate your identity and maintain session security
• • Process payments and contributions via Stripe
• • Calculate and distribute funds to Creators
• • Manage Groups, Splits, and Auto-Splits
• • Track contribution history and milestones
• • Generate payout reports for Creators

5.2 Communication

We use your information to send:

• Transactional emails (payment confirmations, receipts, payout notifications, failed payment alerts)
• Milestone notifications (25%, 50%, 75%, and 100% funding progress)
• Security alerts (password resets, login from new devices, suspicious activity)
• Service updates (important changes to Terms, Privacy Policy, or Platform functionality)

5.4 Fraud Prevention and Security

• • Detect and prevent fraudulent transactions
• • Monitor for suspicious activity
• • Enforce our Terms and Conditions
• • Comply with legal obligations
• • Protect the rights and safety of Users

Third-Party Service Providers

We share your information with trusted service providers who help us operate the Platform:

Legal Requirements

We may disclose your information if required by law, including:

• Court orders or subpoenas
• Legal processes and investigations
• Regulatory inquiries (tax authorities, financial regulators)
• Law enforcement requests (with valid legal authority)
• Protection of rights: To protect the rights, property, or safety of Splitro, our Users, or the public

Right to Access (GDPR Article 15)

Request a copy of the personal information we hold about you.

📧 Email: support@splitro.com with "Data Access Request"

Right to Rectification (GDPR Article 16)

Correct inaccurate or incomplete personal information.

⚙️ Update directly in Account settings or contact support

Right to Erasure / "Right to be Forgotten" (GDPR Article 17)

Request deletion of your personal information (exceptions: transaction records retained for 7 years).

🗑️ Request account deletion at /settings/support

Right to Data Portability (GDPR Article 20)

Receive your data in JSON or CSV format.

📦 Email: support@splitro.com with "Data Portability Request"

Right to Know

You have the right to request:

• Categories of personal information collected
• Categories of sources of personal information
• Business or commercial purpose for collecting personal information
• Categories of third parties with whom we share personal information

Right to Delete

You have the right to request deletion of your personal information (subject to legal retention requirements).

Right to Opt-Out of Sale

We do NOT sell your personal information. Therefore, there is no need to opt out of sale.

Exercising CCPA Rights

To exercise your CCPA rights, contact us at support@splitro.com with "CCPA Request" in the subject line.