Privacy Policy

1. Introduction

Splitifi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").

This policy applies to all users of our Service, including litigants, attorneys, judges, and other legal professionals. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other international privacy regulations.

2. Definitions

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, password, phone number, professional credentials
• Profile Information: Professional affiliation, bar number, jurisdiction, photo, biography
• Case Information: Marriage details, asset information, income data, custody arrangements, settlement proposals
• Financial Information: Payment card details (processed by our payment processor), bank account information, income and expense data
• Communications: Messages, support requests, feedback, survey responses
• Documents: Uploaded files, court documents, financial statements, evidence

3.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Device type, operating system, browser type and version, unique device identifiers
• Log Data: IP address, access times, pages viewed, time spent on pages, referring URLs
• Location Data: General geographic location based on IP address (with your consent for precise location)
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies (see our Cookie Policy)
• Analytics Data: Interaction patterns, feature usage, performance metrics

3.3 Information from Third Parties

We may receive information from:

• Authentication Providers: When you use social login (Google, LinkedIn), we receive basic profile information
• Payment Processors: Transaction information from our payment processing partners
• Public Records: Court filings and other public legal information where applicable
• Professional Verification Services: Bar membership verification, credential validation
• Marketing Partners: Information to help us reach potential users and measure campaign effectiveness

4. How We Use Your Information

We use collected information for the following purposes:

4.1 Service Delivery

• Provide, operate, and maintain our Service
• Process transactions and manage your account
• Generate divorce settlement calculations and recommendations
• Create and manage case documents
• Facilitate communication between parties, attorneys, and courts
• Provide AI-powered insights and analytics

4.2 Service Improvement

• Understand and analyze usage trends and preferences
• Develop new features and functionality
• Improve our own features and calculations using aggregated usage statistics. We do not use your documents, messages or case information to train AI models. OpenAI (through its API) and Anthropic do not train their models on API data by default.
• Conduct research and analysis
• Test and troubleshoot new features

4.3 Communication

• Send you technical notices, updates, and security alerts
• Respond to your comments, questions, and support requests
• Send marketing and promotional communications (with your consent)
• Notify you about changes to our Service or policies

4.4 Security and Legal Compliance

• Detect, prevent, and address fraud, security breaches, and illegal activities
• Enforce our Terms of Service and other agreements
• Comply with legal obligations and respond to lawful requests
• Protect our rights, privacy, safety, or property

4.5 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: Processing necessary to provide our Service
• Consent: Where you have given explicit consent
• Legitimate Interests: For business purposes such as fraud prevention and service improvement
• Legal Obligations: To comply with applicable laws and regulations

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly authorize us to do so, such as sharing case information with your attorney or other parties to your case.

5.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Hosting and storage: Render (application servers), Vercel (website), Amazon S3 (uploaded files) and AWS Secrets Manager (credentials)
• Payments and bank connections: Stripe, Plaid
• Email, text and calls: SendGrid, Twilio
• Error monitoring: Sentry
• Search: Pinecone (vector search)
• Analytics and advertising: Google Analytics, PostHog, Microsoft Clarity, Meta, TikTok. These load only on public pages and only with your consent (see Section 8).
• Fonts: Google Fonts
• AI Services: When you use an AI feature, the text needed for that feature is sent to the provider that runs it. Examples include a chat message, the text of a document you upload for analysis, or a message checked before it is sent to the other parent.
  • Anthropic (Claude): chat, document analysis, message review, case assessment.
  • OpenAI: search and some writing and analysis features.
  • ElevenLabs: voice conversations with Splitifi IQ, including call audio and transcripts. ElevenLabs voice conversations are retained for 30 days.
  We send text, not images. Scanned pages are converted to text on our own systems first. Before any AI feature sends text, we remove Social Security numbers, card, account and routing numbers (keeping the last four digits), dates of birth, street addresses, postal codes, email addresses and phone numbers. Dollar amounts are kept. Providers process this data to return the result to us. Anthropic deletes API inputs and outputs within 30 days under its standard policy. OpenAI may keep API data for up to 30 days for abuse monitoring.

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose information when required by law or in response to valid legal requests, including:

• Court orders, subpoenas, or other legal process
• Government investigations or requests
• To protect our rights, property, or safety
• To prevent fraud or illegal activity
• To comply with regulatory requirements

5.4 Business Transfers

If Splitifi is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice and choices regarding such transfers.

5.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you, for purposes such as research, analytics, and marketing.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

• Active Accounts: Data retained while your account is active and for a reasonable period afterward to comply with legal obligations
• Closed Accounts: Most data deleted within 90 days of account closure, except where retention is required by law
• Case Assessment working data: The document text and extracted details used to prepare your assessment are deleted 90 days after your report is delivered. Your report stays in your account until you delete it or close your account. If you are refunded before delivery, the working data and draft report are deleted.
• AI conversations: Kept in your account until you delete them. You can delete a conversation at any time from the chat.
• Messages reviewed before sending: The text of co-parent messages checked before sending is kept with the message record.
• Financial Records: Retained for 7 years for tax and accounting purposes
• Backup Systems: Data in backup systems deleted according to our backup retention schedule (typically 90 days)

You may request deletion of your personal data at any time by contacting us. We will comply with deletion requests subject to legal and contractual obligations.

7. Data Security

We implement industry-standard security measures to protect your information from unauthorized access, use, alteration, and destruction.

Security Measures

• Encryption: Data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Authentication: Multi-factor authentication available for all accounts
• Access Controls: Role-based access controls and principle of least privilege
• Monitoring: 24/7 security monitoring and intrusion detection
• Regular Audits: Periodic security audits and penetration testing
• Secure Infrastructure: Servers hosted with encryption at rest and in transit
• Employee Training: Regular security awareness training for all staff
• Incident Response: Documented incident response plan

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information about your use of our Service. For detailed information, please see ourCookie Policy.

Types of Cookies

• Essential: Required for the Service to function (authentication, security). Always on.
• Analytics: Google Analytics and PostHog. Off until you choose Accept. Google Analytics runs in consent mode, with advertising storage, advertising data and ad personalization always denied.
• Advertising and session recording: Meta Pixel, TikTok Pixel and Microsoft Clarity. Off until you choose Accept.

Where tracking does not run

We do not load analytics, session recording or advertising pixels on signed-in pages, including your dashboard, portals, account, assessment, monitor, vault, messaging and admin pages. This applies whatever choice you made on public pages. If you move into a signed-in page after accepting, those tools are stopped.

Your choices

On public pages a banner offers Accept, Reject and Manage with equal weight. Your choice is saved in your browser. You can change it at any time with the Cookie settings link in the footer. If your browser sends a Global Privacy Control signal, we treat it as a Reject for advertising pixels and session recording. You can also control cookies through your browser settings.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.

When we transfer personal data from the EEA or UK to other countries, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with third-party processors
• Adequacy decisions where applicable

10. Your Privacy Rights

10.1 GDPR Rights (EEA Users)

If you are located in the EEA or UK, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing based on consent
• Right to Lodge a Complaint: File a complaint with your supervisory authority

10.2 CCPA Rights (California Users)

If you are a California resident, you have the following rights under CCPA:

• Right to Know: Request information about personal data we collect, use, and share
• Right to Delete: Request deletion of your personal data
• Right to Opt-Out: Opt out of sale of personal data (note: we do not sell personal data)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights
• Right to Correct: Request correction of inaccurate personal data

10.3 Other State Privacy Rights

Residents of Colorado, Connecticut, Utah, and Virginia have similar rights to CCPA. Please contact us to exercise these rights.

10.4 Exercising Your Rights

To exercise any of these rights, please contact us atprivacy@splitifi.ioor through your account settings.

We will respond to your request within 30 days (or as required by applicable law). We may request verification of your identity before processing your request.

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.

12. Third-Party Websites and Services

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party services you access.

13. Do Not Track Signals

Some browsers support a "Do Not Track" (DNT) feature. Because there is no common understanding of how to interpret DNT signals, we do not currently respond to DNT signals. We do respond to Global Privacy Control signals as described in Section 8. You can also control cookies and tracking through your browser settings and the Cookie settings link in the footer.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Email to the address associated with your account
• Prominent notice on our Service
• In-app notification

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Supervisory Authority

If you are located in the EEA or UK and have concerns about our data processing that we have not adequately addressed, you have the right to lodge a complaint with your local supervisory authority.