Privacy Policy

1. Who controls your data

Split The Party is operated by the legal entity registered under company number (CNPJ) 42.329.913/0001-04, which is responsible for the decisions regarding the processing of your personal data (data controller).

For any privacy-related matter or to exercise your rights, contact our Data Protection Officer (DPO) at team.splittheparty@gmail.com.

2. What data we collect

We collect only the data needed for the service to work:

• Event data: event name, participant names, expense descriptions and amounts that you enter to calculate the bill split.
• Contact data: your email address, when you write to us for support or to exercise your rights.
• Payment data: when you purchase premium access, the payment is processed directly by Mercado Pago (PIX, for purchases in Brazil) or Stripe (card, for international purchases). The data you enter on the payment page (such as email and card details) is collected and processed by the respective provider. We do not store credit card data. We only receive the payment confirmation and a transaction identifier.
• Usage data: browsing metrics collected by Google Analytics (pages visited and usage events, such as starting a split or the checkout), used in aggregate form to understand and improve the service.
• Technical data: to route the payment method, we identify the country of access from your IP address, without storing it associated with your identity.

3. Why we use your data and on which legal basis

We process your personal data for the following purposes and legal bases set out in the LGPD:

• To run the bill-splitting calculation and generate the shareable link (legal basis: performance of a contract).
• To process and confirm premium access payments (legal basis: performance of a contract).
• To respond to support requests and rights requests (legal basis: legal obligation and legitimate interest).
• To measure audience and improve the service through aggregate usage statistics (legal basis: legitimate interest).
• To ensure security and prevent fraud (legal basis: legitimate interest).

4. Who we share your data with

We do not sell your personal data. We share data only with service providers (processors) that are strictly necessary for the platform to function:

• Mercado Pago: processing of PIX payments (purchases in Brazil).
• Stripe: processing of card payments (international purchases).
• Google (Google Analytics): aggregate site usage statistics.
• Amazon Web Services (AWS): hosting infrastructure and storage of event data.
• Vercel: hosting of the web application.

5. Cookies and local storage

We use cookies and the browser's local storage for functional purposes: a cookie keeps your preferred language (valid for 1 year) and localStorage allows the recovery of a payment in progress.

We also use Google Analytics, which sets measurement cookies (such as _ga) to generate aggregate site usage statistics, such as pages visited and steps completed. We do not use advertising cookies and we do not sell browsing data. You can block these cookies in your browser settings without affecting how the service works.

6. How long we keep your data

Event and transaction data is kept for as long as necessary to provide access to the premium link and to comply with legal and tax obligations. You may request the deletion of your data at any time through our contact email, subject to the mandatory retention cases provided by law.

7. Your rights as a data subject

Under article 18 of the LGPD, you have the right to:

• Confirm the existence of processing and access your data;
• Correct incomplete, inaccurate, or outdated data;
• Request the anonymization, blocking, or deletion of unnecessary data;
• Request data portability;
• Withdraw consent and request the deletion of data processed on that basis;
• Obtain information about the sharing of your data.

8. Data security

We adopt reasonable technical and administrative measures to protect your data against unauthorized access, loss, or destruction. However, no system is entirely immune to risk, and we are committed to reporting relevant incidents as required by the LGPD.

To prioritize convenience, we do not require registration, login, or email. For this reason, your event's premium link is accessible to anyone who has the address, without authentication. We recommend sharing it only with the event participants.

9. International data transfer

Some of our service providers (such as AWS, Stripe, and Google) may process data on servers located outside Brazil. In these cases, we ensure the transfer occurs with providers that adopt protection standards compatible with the LGPD.

10. Children and minors

Split The Party is not intended for people under 18. We do not knowingly collect data from children and minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date of the last update will always be shown at the top of this document. We recommend reviewing this page regularly.

12. Contact

For questions, requests, or to exercise your rights, contact us at team.splittheparty@gmail.com.