This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service, and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
- Application means the software program provided by the Company downloaded by You on any electronic device, named Splitleaf.
- Company (referred to as either "the Company", "We", "Us", or "Our" in this Agreement) refers to Squircle AS, 925 797 766 MVA NO, Postboks 2880 Tøyen, 0608 OSLO, Norway.
- Cookies are small files placed on Your Device by a website, containing details of Your browsing history among its many uses.
- Country refers to: Norway.
- Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
- Personal Data is any information that relates to an identified or identifiable individual.
- Service refers to the Application or the Website or both.
- Service Provider means any natural or legal person who processes Personal Data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Website refers to Splitleaf, accessible from splitleaf.eu.
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data (Application)
When You create an account to use the Application, We ask You to provide certain personally identifiable information that can be used to contact or identify You, namely:
- Name
- Surname
- Email address
This information is collected solely for the purpose of creating and managing Your Account, providing You with the Application and its License, and communicating with You about Your Account.
Payment Data
Payments for the Application's License Fee and any Plan are processed entirely by Stripe, Inc. ("Stripe"), a third-party payment processor. We do not collect or store Your full payment card details on Our own systems. Stripe collects and processes payment information (such as card details and billing address) directly, in accordance with Stripe's own privacy policy, available at stripe.com/privacy.
Usage Data (Website)
We use Plausible Analytics, a privacy-friendly, cookieless analytics service, to understand aggregate traffic and usage patterns on the Website. Plausible does not use cookies, does not collect or store any Personal Data, and does not track You across devices or websites. The data collected is aggregated and anonymous (e.g., page views, referrer, country-level location derived from IP address, device/browser type), and no individual visitor can be identified from it.
We do not use any other cookies, tracking pixels, fingerprinting techniques, or third-party advertising or analytics tools on the Website.
Device and License Data (Application)
To enforce the License terms (including the limit on concurrently authorized Devices), the Application generates and stores a randomly generated, non-identifying Device identifier on Your Device. This identifier is not derived from any hardware or personal information and cannot, on its own, be used to identify You. It is used solely to manage Your authorized Devices and issue license validation tokens.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To create and manage Your Account: to register You as a user, provide access to the Application, and manage Your License and Plan.
- To process payments: to facilitate purchases and subscription billing via Stripe, and to communicate about invoices, receipts, and payment issues.
- To manage Your requests: to attend to and manage Your requests, including refund requests, to Us.
- To contact You: to email You regarding updates, security notices, or informational communications related to the Service, where necessary or permitted.
- For legal reasons: to comply with a legal obligation, or to protect the rights, property, or safety of the Company, You, or others.
Legal Basis for Processing (EU/EEA Users)
If You are located in the European Union or European Economic Area, We process Your Personal Data on the following legal bases under the General Data Protection Regulation (GDPR):
- Performance of a contract: to create Your Account, provide the Application, process payments, and administer Your License and Plan.
- Legitimate interests: to maintain the security of the Service, prevent fraud and abuse, and understand aggregate Website usage (via cookieless, non-identifying analytics).
- Legal obligation: where processing is required to comply with applicable law, such as accounting and tax obligations.
We do not rely on consent for the Website's analytics because Plausible Analytics does not process Personal Data or set cookies, and therefore does not require consent under the ePrivacy Directive or GDPR.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if We are required to retain accounting records under applicable tax law), resolve disputes, and enforce our legal agreements and policies.
If You delete Your Account, We will delete or anonymize Your Personal Data within a reasonable period, except where retention is required by law.
Transfer of Your Personal Data
Your information, including Personal Data, is stored and processed in Our primary database located in the EU West (Ireland) region. It may also be processed by Service Providers (such as Stripe) located outside Your jurisdiction, including outside the European Economic Area.
Where Personal Data is transferred outside the EEA, the Company ensures appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision, in accordance with GDPR requirements. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Other Legal Requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
We do not sell Your Personal Data, and We do not share it with third parties for their own marketing purposes.
Security of Your Personal Data
The security of Your Personal Data is important to Us. We use commercially reasonable administrative, technical, and organizational measures to protect Your Personal Data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee its absolute security.
Children's Privacy
Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18 without verification of parental consent, We take steps to remove that information from Our servers.
Your Data Protection Rights (GDPR)
If You are located in the European Union, European Economic Area, or the United Kingdom, You have the following data protection rights:
- Right to access — You have the right to request copies of Your Personal Data.
- Right to rectification — You have the right to request that We correct any information You believe is inaccurate or incomplete.
- Right to erasure — You have the right to request that We erase Your Personal Data, under certain conditions.
- Right to restrict processing — You have the right to request that We restrict the processing of Your Personal Data, under certain conditions.
- Right to object to processing — You have the right to object to Our processing of Your Personal Data, under certain conditions.
- Right to data portability — You have the right to request that We transfer the data We have collected to another organization, or directly to You, under certain conditions.
- Right to withdraw consent — where processing is based on consent, You have the right to withdraw that consent at any time.
If You wish to exercise any of these rights, please contact Us using the details below. You also have the right to lodge a complaint with a supervisory authority. As the Company is established in Norway, the relevant authority is the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no), or the data protection authority of Your own EU/EEA country of residence.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date below.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Last updated: August 19, 2026
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
- Business Name: Squircle AS
- Business Number: 925 797 766 MVA
- Post: Postboks 2880 Tøyen, 0608 OSLO, NORWAY
- Email: privacy@splitleaf.eu