This Privacy Policy explains how Signal Studio Limited (NZ Company Number 8135662), a company registered in New Zealand ("Signal Studio", "we", "us", or "our"), collects, uses, and protects personal information in connection with the Split application, website, and related services (the "Service"). Split is a product of Signal Studio Limited.
Our registered office is 7 Fred Taylor Drive, Westgate, Auckland 0814, New Zealand. You can contact us at privacy@withsplit.com for any privacy matter.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
Split involves two distinct groups of people, and our role under data protection law differs for each:
When you create a Split account we collect:
When you subscribe to a paid plan, our payment processor Stripe collects billing information on our behalf:
When our customer deploys Split on their website, split.js runs in the visitor's browser to assign and record variants. For each visit we may process:
We do not require, collect or store direct identifiers (name, email, phone number) from website visitors through split.js.
When you access the Split dashboard we automatically collect standard server and access logs (IP address, browser, device type, referring URL, timestamp). These are used for security, abuse prevention and debugging.
We use the data described above to:
We do not sell personal data. We do not use visitor data collected through split.js for any advertising, tracking or profiling purpose.
Split connects to your Webflow account via Webflow's official OAuth and Designer Extension platform. Through this integration we access only the scopes required to provide A/B testing, which include read access to your site structure (pages and elements) and the ability to publish variation changes that you explicitly configure. We do not modify Webflow content outside of the variations you create, and we do not access Webflow data from sites you have not connected to Split.
We use cookies for:
Split does not use cookies for advertising, cross-site tracking, or building behavioural profiles of website visitors.
Split uses two Google services and is bound by the Google API Services User Data Policy, including the Limited Use requirements, as described at Google's Limited Use policy.
We use the following subprocessors to operate Split. Each is bound by a data processing agreement and is only permitted to use your data for the purposes we specify.
We will provide at least 30 days' notice by email before engaging a new subprocessor that has access to personal data, so that you can object before the change takes effect.
We use reasonable technical and organisational measures to protect personal data, including TLS encryption in transit, encryption of sensitive data at rest, role-based access controls, and regular review of our infrastructure and code.
Where Signal Studio Limited acts as a processor, we will notify affected customers without undue delay and within 72 hours of becoming aware of a personal data breach affecting their data, so that the customer can meet its own notification obligations.
No method of transmission or storage is completely secure; we cannot guarantee absolute security of your data.
Subject to your location, you may have the following rights in relation to personal data we hold about you as a controller: access, rectification, erasure, portability, objection, restriction, and (where processing is based on consent) withdrawal of consent.
To exercise any of these rights, contact privacy@withsplit.com. We will respond within 30 days.
Where you are a website visitor (not a dashboard user), please contact the website owner directly in the first instance; they are the controller of your data. If they escalate to us, we will support them in responding.
We do not currently appoint a representative under Article 27 of the EU GDPR. Data subjects in the European Economic Area and the United Kingdom may contact us directly at the email above to exercise their rights.
Split is operated from New Zealand. Your data may be processed in other countries, including the United States, where our subprocessors (Supabase, Stripe, Google) maintain infrastructure. For transfers from the EEA or UK we rely on Standard Contractual Clauses or equivalent transfer mechanisms as required by applicable data protection law.
A Data Processing Agreement is available on request at privacy@withsplit.com. Customers whose websites serve visitors in the European Economic Area, the United Kingdom, or California should execute a DPA with us before going live with Split.
The Service is not intended for, or directed at, anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact privacy@withsplit.com and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make changes we will update the "Last updated" date above. For material changes we will notify you by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
For any privacy matter, please contact:
Signal Studio Limited (NZ Company Number 8135662)
7 Fred Taylor Drive, Westgate, Auckland 0814, New Zealand
privacy@withsplit.com (privacy)
support@withsplit.com (general support)
If you are in New Zealand you may also contact the Office of the Privacy Commissioner:
Office of the Privacy Commissioner
PO Box 10-094, The Terrace, Wellington 6143
Phone 0800 803 909
If you are in the European Economic Area or United Kingdom, you have the right to lodge a complaint with your local supervisory authority.