Legal

Privacy Policy

What we collect, why we collect it, and the choices you have. We collect the minimum needed to run a payments product well.

Last updated: 30 July 2026

Who we are

Splitt operates www.splitt.com.au, a group-payment service based in Sydney, Australia. We handle personal information in accordance with the Australian Privacy Principles. Contact: hello@splitt.com.au.

What we collect

  • Merchants: business name, contact email, industry, website, typical order size, logo, and Stripe account identifiers created during payout onboarding.
  • Group participants: the display name entered when claiming a spot, email address (captured at payment for receipts and refund notices), and the payment method type used (e.g. card or Afterpay).
  • Payment details:card and bank numbers are collected and stored by Stripe, our payment processor — they never touch Splitt's servers.
  • Technical data: standard logs (IP address, browser type) used for security and rate limiting.
  • Shopify stores: if you install our Shopify app, the store domain and an API access token for the store.

How we use it

  • Running group orders: showing who has claimed and paid, sending receipts.
  • Settling payments to merchants and issuing automatic refunds.
  • Sign-in links, order notifications and service emails.
  • Fraud prevention, security and legal compliance.
  • Understanding aggregate usage to improve the product.

We do not sell personal information, and we do not use it for third-party advertising.

Who we share it with

Only service providers needed to run Splitt, under their own privacy commitments:

  • Stripe (payment processing and payouts)
  • Supabase (database and authentication, hosted in Sydney)
  • Vercel (website hosting)
  • Resend (transactional email)
  • Shopify (only for stores using our Shopify app)

Some providers process data outside Australia (for example in the United States). We share only what each provider needs to perform its service.

Cookies

We use only functional cookies: a sign-in session for merchants and a signed cookie that remembers which spot you claimed on an order page. No advertising or cross-site tracking cookies.

Retention

Order and payment records are kept while an account remains active and as required for financial record-keeping. If a Shopify store uninstalls our app, its stored data is deleted on Shopify's redaction request. You can ask us to delete your account data at any time, subject to records we must keep by law.

Your rights

You can ask us to access, correct or delete personal information we hold about you by emailing hello@splitt.com.au. If you are unsatisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We will post updates to this policy here and note the date above. Material changes are notified to merchant account emails.