Privacy Policy

Splat (“we”, “us”) provides software that lets sellers create a product once and publish it across marketplaces and social channels. This policy explains what personal data we process when you use joinsplat.com and the Splat app.

Who we are

Splat is operated as a UK business, remote-first, from London. Contact: hello@joinsplat.com.

Data we collect

• Waitlist data — the email address you submit to join the list, a referral code we generate for you, and the code of the person who referred you, if any.
• Channel interest — which upcoming channels you request from the marketing site. These votes are not tied to your email.
• Account data — email address and password hash (via Supabase Auth), once accounts open. We do not store your password in plaintext.
• Workspace data — listings, photos, videos, orders, messages and settings you create in the product.
• Connected accounts — OAuth tokens and API credentials for marketplaces, social channels, ads and carriers. Credentials are encrypted at rest (AES-256-GCM).
• Billing data — handled by Stripe. We store subscription status, not full card numbers.
• Usage data — application logs and error reports needed to operate and secure the service.

Why we process it

To run the waitlist and, when the product opens, to provide it (contract), to bill you, to keep the platform secure, and — if you opt in — to send occasional product emails. We do not sell personal data.

Processors

We use trusted processors to run Splat, including Supabase (auth and database), Vercel and Railway (hosting), Cloudflare (media), Stripe (payments), Resend (transactional email, when enabled) and Sentry (error tracking). Marketplace and social providers only receive the data needed to publish or fulfil on that channel.

Retention

We keep waitlist, account and workspace data while your place on the list or your account is active. After you ask us to delete it we remove or anonymise personal data within 30 days, except where we must retain records for legal, tax or security reasons.

Your rights

Under UK GDPR you can access, correct, export or delete your personal data, and object to or restrict certain processing. Email hello@joinsplat.com. You can also complain to the ICO (ico.org.uk).

International transfers

Some processors store data in the UK, EU or US. Where data leaves the UK we use an appropriate safeguard such as the UK International Data Transfer Addendum.

Changes

We will post updates on this page. Material changes will be emailed to account holders where required.