Privacy Policy

Last updated: August 28, 2026

1. Introduction

SplitSeat ("we", "us", "our") is committed to protecting your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy explains how we collect, use, and protect your data when you use our website and platform (the "Service").

Contact: privacy@splitseat.io

2. Data Controller

The data controller is:
SplitSeat
Italy

3. Personal Data We Collect

a) Data you provide

• Email address
• Name (optional)
• Account and participation information

b) Automatically collected data

• IP address
• Browser and device information
• Usage data (pages visited, actions taken)
• Cookies and similar technologies (see Section 6)

4. Purpose and Legal Basis

We process personal data for:

• Providing and operating the Service (Art. 6(1)(b) GDPR)
• Payment processing and accounting (Art. 6(1)(b),(c))
• Security and fraud prevention (Art. 6(1)(f) — our legitimate interest in keeping the Service safe and reliable)
• Legal compliance (Art. 6(1)(c))

5. Payments

Payments are processed by Stripe, Inc.. SplitSeat does not store credit card or banking details.

Stripe Privacy Policy: https://stripe.com/privacy

6. Cookies and Tracking Technologies

We use essential cookies necessary to operate the Service (e.g. keeping you signed in). If we introduce analytics, performance, or marketing cookies in the future, we will update this policy and request your consent where required by law.

7. Data Sharing and International Transfers

We do not sell personal data. Data may be shared only with:

• Payment processors (Stripe)
• Hosting and infrastructure providers
• Authorities when legally required

Some of these providers — including Stripe, Inc. — are located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

8. Data Retention

Personal data is retained only for as long as necessary to provide the Service and meet legal obligations.

9. Your Rights

You have the right to:

• Access your data
• Rectify inaccurate data
• Request deletion
• Restrict or object to processing
• Data portability
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it)

Requests can be sent to privacy@splitseat.io.

10. Security

We apply appropriate technical and organizational measures to protect your data. No system is completely secure.

11. Changes

This Privacy Policy may be updated. The updated version will be published on this page.