Scope and information we receive
This policy describes information used by the Splitsville website, private account workspace, and contributor invitation and response features. You can review an invitation and record a response without creating an account.
Account information includes your name, email address, password hash, verification and recovery records, sessions, and browser-trust records. If you enroll a passkey, Splitsville stores its public-key credential and related authentication information; it does not receive your passkey private key, fingerprint, face scan, or device PIN.
Optional creator information includes professional names, creative roles, PRO affiliations, writer and publisher IPI information, publisher details, and phone numbers. Song records include composition titles, optional genres, contributor names, contacts entered by an administrator, roles, proposed ownership percentages, saved revisions, invitation delivery information, and responses. Recorded responses include contributor response names, decisions, optional comments or disagreement explanations, and timestamps.
We also receive information you send to info@getsplitsville.com. Do not send passwords, verification codes, private invitation links, or information unrelated to your request.
Where information comes from and why we use it
Information comes from you, song administrators and collaborators who enter or select your contributor details, your responses, and account-security activity. We use it to operate private workspaces; save and display proposals; deliver invitations; record confirmations or disagreements; preserve revision history; verify email ownership; associate eligible confirmed records with verified accounts; provide exports; support users; and protect the service against unauthorized access and abuse.
We use optional profile and sharing choices to provide the features you select. This release does not include advertising analytics, targeted-advertising integrations, payment-card collection, or a contact-list sales feature.
Who can see information
Song administrators can see the contact information they entered, the allocation, and recorded contributor responses. A private invitation allows its holder to review that proposal’s contributor names, roles, percentages, and the invited contributor’s response. Keep invitation links private. Guest review does not disclose other contributors’ email addresses, phone numbers, private profiles, or unrelated songs.
Eligible signed-in contributors see authorized song revisions under the existing identity and response rules. Matching an account email alone does not expose a shared catalog before email verification and the required confirmation. Creating an account does not create a duplicate copy of the original song record.
Creator Search is a separately controlled feature available within the signed-in service. Its results show professional name, creative role, and writer PRO. It does not expose email, phone, IPIs, publisher details, or private catalogs. Search visibility is not permission for every user to access your contacts or song records.
Email and phone sharing are independent opt-ins for eligible verified collaborators. Shared-contact access requires authorization for the exact song revision and the required confirmations; it is not a public directory. Turning sharing off stops subsequent shared-contact lookups. It cannot erase information someone previously supplied, received, exported, or retained independently.
Your choices and messages
The signup form starts with email updates and Creator Search visibility selected. You can uncheck either option before creating your account. Email sharing and phone sharing start off. Existing saved choices are preserved. You can change these choices in Privacy Settings and update supported profile fields in Creator Profile.
Optional Splitsville updates and opportunities are separate from essential account, security, recovery, and song-invitation messages. Turning marketing off does not disable necessary service messages. No marketing campaign service is connected in this release. A preselected preference is not proof of affirmative consent. Any future marketing campaign must use the permissions required for its recipients; a saved default alone is not treated as that permission. Creator Search visibility can be turned off in Privacy Settings.
Cookies and security records
Splitsville uses cookies for account sessions, remembered-browser trust, and short-lived verification or passkey flows. Sessions currently last up to 12 hours; remembered-browser trust lasts up to 30 days. Remembered-browser trust alone does not grant account access. Email-code challenges last up to 10 minutes.
After a valid saved guest response, a 15-minute HttpOnly cookie scoped to registration can prefill only the invitation recipient’s email. The prefill is editable and is not authentication or email verification. The cookie is cleared on successful signup. We do not put the email or private invitation token into signup or sign-in URLs.
An application maintenance worker runs at startup and hourly while the service is running. It removes expired sessions, remembered-browser records, authentication challenges, pending account links and their signup choices, and rate-limit buckets, with an operating target of removal within 24 hours after expiry. Daily email-attempt aggregates are retained for 90 days. The operator must monitor maintenance and recover from interruptions; expiry and physical removal are separate events. Signing out revokes the current session, while password recovery revokes existing sessions, remembered browsers, pending authentication challenges, and saved passkeys. Invitation links currently expire after seven days for new responses. Expiry of a cookie, challenge, or invitation limits its use; it does not automatically erase an already saved song revision or response. Security diagnostics record fixed failure categories rather than raw private invitation tokens, credentials, recipient lists, or SQL messages.
Service providers and other disclosures
Splitsville currently uses Hostinger for application hosting, the managed database, and authenticated email delivery. These services process information needed to store records, deliver pages and messages, and operate the service. Hosting, delivery and backup services may process information in different locations. We do not represent that all processing occurs in a particular country.
The operator has tested storing encrypted account-closure recovery records in a private Google Drive account. These records help preserve account restrictions when recovering a database; they are not a full song-catalog backup. The encryption key is kept separately from Drive and is not uploaded with the files. Ledger entries contain account identifiers, email-derived digests and closure or disposal timestamps inside the encrypted file; they are not described as anonymous. Routine automated Drive exports are not enabled in this release. We will update this policy if recovery-storage arrangements materially change.
New contributor invitations include the Splitsville logo inline within the email. Displaying that logo does not require an external image request or a preview password, and the image contains no individual tracking identifier. Older invitations may reference a shared hosted logo. Passkeys may be managed by your device or passkey provider under that provider’s own settings.
We may disclose information when required by applicable law or a valid legal process, or when reasonably necessary to investigate abuse, protect service security, or protect people’s rights. Access should be limited to the information needed for that purpose.
Retention, correction, exports, and deletion requests
Splitsville preserves saved revisions and recorded responses to maintain the collaborative record. Account, profile, authentication, invitation, and security information is stored for the operation and protection of those features. You can request account closure from Account Security and complete it using a fresh email code and explicit confirmation. Verified closure immediately restricts account access, revokes sessions, remembered browsers and passkeys, and disables profile search, optional updates and profile contact sharing. Optional current creator-profile and contact-preference records are removed within 30 days; the maintenance worker begins that removal at day 29. Closure does not automatically reopen through signup or password recovery. Necessary account identity and shared song history remain restricted for individually reviewed requests and annual retention review; they are not automatically erased by closing an account. Database protections reject routine changes or deletion of preserved proposals, responses, and related action records; they are integrity controls, not an exemption from applicable privacy obligations. Shared-record requests require individual review to assess any correction, restricted access, de-identification, or deletion required by applicable law. Such requests are not completed automatically by account closure; contact us so we can assess the appropriate action without silently rewriting contributor actions. We do not claim that such a request has been fulfilled simply because a session or invitation expired. The operator handles requests through info@getsplitsville.com. Applicable law, necessary shared records, recovery safeguards and provider backup retention affect the action available for a particular request. We do not promise immediate deletion from every retained copy or a universal disposal deadline.
You can export supported catalog information to CSV and download an authorized individual song revision as a split sheet PDF. The PDF contains contributor credits, percentages, available confirmation timestamps, the revision’s overall status, and its generation time; it omits private contacts and response notes. For access, correction, account closure, or deletion requests, contact info@getsplitsville.com. We may need to verify your identity and clarify the request. Requests involving shared records must account for applicable law, other contributors’ records and rights, and any information that must be retained. Account closure does not immediately delete collaborative history, independent exports, or backups.
Any privacy rights and response requirements depend on applicable law and the circumstances. For a privacy request, a question about a decision, or an appeal where available, contact info@getsplitsville.com. We assess the request and applicable requirements individually; we do not assume eligibility for, or exemption from, a particular privacy law.
Security, availability, and policy changes
The application uses password hashing, access controls, private sessions, and protected email delivery. No online service can promise perfect security. Protect your credentials and invitation links, and report suspected misuse to our contact email.
Splitsville is intended for worldwide use, subject to applicable requirements and service availability. Registration does not ask for age or date of birth, and the application does not provide age-verification or parental-consent workflows. Not collecting age information does not establish that a user is an adult or that requirements concerning children are inapplicable. If you believe information about a child has been provided without the authority required by applicable law, contact info@getsplitsville.com so the operator can assess the concern and appropriate restrictions or other action. Worldwide availability remains subject to applicable requirements.
Changes to data handling must be reflected in this policy. We will update the date shown on this policy and provide any notice or obtain any consent required for material changes.
Contact
For questions about information handled by Splitsville, email info@getsplitsville.com. Do not include passwords, verification codes, or private invitation links.