Privacy Policy
Effective date: March 19, 2026 · SplitzPay India Pvt Ltd
1. Information We Collect
We collect only what we need to run SplitzPay for you. Here is what that includes:
Information you give us directly
- Account details — your name, email address, and password when you sign up.
- Business details — your business name and subscription plan chosen during onboarding.
- Client data — names, phone numbers, and email addresses of your clients that you add or import into SplitzPay.
- Invoice data — invoice numbers, amounts, due dates, and descriptions you enter or sync from accounting tools.
- Integration credentials — API keys or OAuth tokens for WhatsApp Business, Razorpay, Zoho Books, or QuickBooks, stored encrypted.
Information collected automatically
- Usage data — pages you visit, features you use, and actions you take within the app (e.g. reminders sent, invoices created).
- Device and browser data — IP address, browser type, operating system, and referring URL.
- Cookies and similar technologies — session cookies to keep you logged in, and analytics cookies to understand how the product is used. See Section 7 for details.
Information from third parties
- Google OAuth — if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password.
- Accounting integrations — if you connect Zoho Books or QuickBooks, we receive invoice and client data from those services on your behalf.
- Payment processors — Razorpay may share payment confirmation events with us via webhook so we can mark your invoices as paid.
2. How We Use Your Information
We use your information to provide and improve SplitzPay. Specifically, we use it to:
- Create and manage your account and business profile.
- Send WhatsApp payment reminders to your clients on your behalf.
- Generate Razorpay payment links and track payment status.
- Sync invoices from your connected accounting tools.
- Send you transactional emails — such as account verification, password reset, and billing receipts.
- Improve, debug, and secure the product using aggregated analytics.
- Comply with legal obligations such as tax reporting and fraud prevention.
We do not sell your data. We do not use your data or your clients' data for advertising. We do not share your information with third parties except as described in Section 4.
3. Your Clients' Data
When you add your clients' contact details and invoice information to SplitzPay, you are the data controller for that data and we act as the data processor. This means:
- You are responsible for ensuring you have the right to share your clients' data with us.
- We process your clients' data only to deliver the service you have configured — specifically, sending WhatsApp reminders and payment links on your behalf.
- We do not contact your clients for any purpose of our own.
- When you delete a client or close your account, their data is deleted from our systems within 30 days.
5. Data Storage and Security
Your data is stored in Supabase (PostgreSQL) on AWS servers in the Asia-Pacific region. All data is encrypted at rest and in transit using TLS 1.2 or higher.
Sensitive credentials — such as WhatsApp access tokens and Razorpay API keys — are stored encrypted and are never exposed in logs or API responses.
We use Row-Level Security (RLS) on our database so that each business account can only access its own data, even at the database layer.
While we take security seriously, no system is perfectly secure. If you suspect unauthorised access to your account, please contact us immediately at hello@splitzpay.app.
6. How Long We Keep Your Data
| Account and business data | For the life of your account, plus 90 days after deletion |
| Invoice and client data | For the life of your account, plus 30 days after deletion |
| Reminder logs | 24 months from the date the reminder was sent |
| Payment records | 7 years (required by Indian accounting and tax law) |
| Analytics data | 26 months (Google Analytics default) |
You can request deletion of your account and associated data at any time by emailing hello@splitzpay.app. Requests are processed within 30 days. Data required for legal or regulatory compliance will be retained for the legally required period.
8. Your Rights
Regardless of where you are located, you have the following rights regarding your personal data:
- Access — you can request a copy of the personal data we hold about you.
- Correction — you can ask us to correct inaccurate or incomplete data.
- Deletion — you can ask us to delete your data, subject to legal retention requirements.
- Portability — you can request your data in a machine-readable format (CSV or JSON).
- Objection — you can object to how we process your data in certain circumstances.
- Withdraw consent — where processing is based on your consent, you can withdraw it at any time without affecting previous processing.
To exercise any of these rights, email us at hello@splitzpay.app with your request. We will respond within 30 days. We may need to verify your identity before processing the request.
9. Children's Privacy
SplitzPay is a business tool intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
10. Links to Other Websites
SplitzPay may contain links to third-party websites (for example, Razorpay, Zoho Books). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. We encourage you to review this policy periodically.
Your continued use of SplitzPay after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or your data, please contact us:
We aim to respond to all privacy enquiries within 5 business days.