Legal Information
Last updated: 12/18/2025
Business Information
Business Name: SplitPay
Legal Entity: Sole Proprietorship
Registered Address: France
Data Controller (GDPR)
Data Controller: SplitPay (Sole Proprietorship)
Responsible for Data Protection: Business Owner
Contact Email: privacy@splitpay.tech
Legal Basis for Processing (GDPR Article 6)
1. Performance of Contract
We process your data to provide our payment splitting service. This includes:
- Creating and managing splits
- Processing payments
- Sending payment notifications
2. Consent
We process certain data based on your explicit consent:
- Email notifications (you can withdraw consent at any time)
- Analytics cookies (if accepted)
- Marketing communications (if applicable)
3. Legitimate Interest
We process some data based on our legitimate interests:
- Security and fraud prevention
- Service improvement
- Legal compliance
Data Retention Periods
User Account Data: Retained until account deletion or 3 years of inactivity
Notification Preferences: Retained until account deletion
Notification Logs: Retained for 2 years
Consent Records: Retained for 3 years after consent withdrawal
Note: Blockchain data (transactions, splits) cannot be deleted as they are immutable and publicly available on the blockchain.
International Data Transfers
We use third-party services that may transfer your data outside the European Economic Area (EEA):
- Stripe (United States): Payment processing
Protected by Standard Contractual Clauses (SCCs) - Resend (United States): Email delivery
Protected by Standard Contractual Clauses (SCCs) - Base Network (Blockchain): Public blockchain
Data is publicly available and immutable
Your Rights (GDPR)
Right of Access (Article 15): You can request a copy of your data
Export your data here
Right to Rectification (Article 16): You can update your information in your profile
Right to Erasure (Article 17): You can request deletion of your data
Delete your data here
Right to Restrict Processing (Article 18): You can limit how we process your data
Right to Data Portability (Article 20): You can export your data in a structured format
Right to Object (Article 21): You can object to certain types of processing
Right to Withdraw Consent: You can withdraw your consent at any time
Manage your preferences here
Exercising Your Rights
To exercise any of your rights, please contact us at:
We will respond to your request within 30 days as required by GDPR.