Privacy

Last updated: May 2026

Draft pending legal review. This text describes how we intend to handle your data. A Texas-licensed attorney is reviewing the final language before public launch.

What we collect

We collect what you give us, plus a few technical basics our servers need to run.

Account: email address, password (hashed), name.
Intake: household details, finances, goals, logistics. Anything you type into the wizard.
Assistant conversations: the questions you ask the assistant and the responses you receive.
Dossier: the AI-generated dossier and any edits you make.
Payments: Stripe processes your card. We store the Stripe payment intent ID, never your card number.
Technical: IP address, user-agent, timestamps for consent records.

How we use it

We use your information to do three things: run the product, keep regulatory records, and (when you choose) hand your dossier to a licensed attorney.

Generate your dossier with Anthropic Claude.
Show your information back to you so you can review and edit it.
Send transactional emails: payment confirmations, marketplace notifications (interest expressed, attorney chosen, engagement confirmed), and account-related alerts.
Keep audit records of payments, consents, and AI interactions for regulatory defense.
Share your dossier with one attorney. Only after you explicitly consent on the “Send to attorney” page.

Who we share it with

We do not sell your information. We use a small set of processors to deliver the product:

Supabase (database + auth + storage), region: US East.
Anthropic(Claude API), for intake reasoning and dossier generation. Per Anthropic’s API terms in force, your inputs are not used to train their models.
Stripe (payments).
Resend (transactional email).
Vercel (hosting).

One verified attorney sees your dossier and contact details after you consent to the handoff. Until that consent, no third party outside the processors above sees your case details.

How long we keep it

Account + dossier: until you delete your account. Soft-delete window: 30 days for recovery.
Consent records + audit logs: 7 years (regulatory defense).
Payment records: as required by Stripe and US tax law.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@splitkind.com and we’ll respond within 30 days.

Security

Data in transit uses TLS. Data at rest is encrypted by Supabase. We limit access to production data to the people who need it for operations. We log every state-mutating action so we can investigate anything that goes wrong.

Contact

Privacy questions: privacy@splitkind.com. General support: support@splitkind.com.