Privacy notice

Splicebit Technologies ("Splicebit", "we", "us") runs splicebit.net and decides how the personal data collected through it is used. Under India's Digital Personal Data Protection Act 2023 (the "DPDP Act") we are the Data Fiduciary; under the EU and UK GDPR we are the controller.

Registered office: Thane, Maharashtra, India. Email: info@splicebit.net.

This notice covers splicebit.net only. Our products run on their own sites and apps (for example campaignos.splicebit.net and formalytics.splicebit.net), and each has its own privacy notice, which applies when you use that product. When we build something for a client, the client decides how their users' data is used and we handle it on their behalf under our agreement with them.

What you give us

• Contact form: your name, email address, company (optional), what your message is about, the product it concerns, and your message.
• Waitlists, betas, early access and demo requests: your name, email address and anything else you choose to tell us.
• Emails and calls: whatever you share when you write to us or talk with us.

What we collect automatically

• Technical data: your IP address, browser and device type, the pages you request, the page that sent you here, and the date and time. Our hosting and security provider records this in its logs.
• Abuse prevention: when you send a form, the IP address it came from, so we can stop repeated or automated submissions.

We don't ask for sensitive data such as health, financial, biometric or government ID details. Please don't include them in a message.

We use personal data only for the purposes below. Under the DPDP Act, we rely on the data you've voluntarily given us for that purpose, or on your consent. Under the GDPR, the legal basis for each is noted in brackets.

• To reply to you and talk about the work or product you asked about (steps you asked us to take before a contract, or our legitimate interest in answering enquiries).
• To screen out spam and abuse. Formalytics, our own form backend, checks each submission, and this can include an AI model reading the message to judge whether it's a genuine enquiry. It only decides whether a message reaches us as genuine or is filed as likely spam (our legitimate interest in security). If you think a real message was filtered, email us.
• To keep the site running and secure, and to find and fix problems (our legitimate interest).
• To send you updates about a product when you've joined its waitlist, beta or early access list (your consent, which you can withdraw at any time).
• To do the work if you become a client (performance of our contract).
• To meet legal obligations and to establish, exercise or defend legal claims (legal obligation, or our legitimate interest).

We don't send marketing emails you didn't ask for, and we don't make decisions about you by automated means that have legal or similarly significant effects.

splicebit.net doesn't set advertising or tracking cookies, and doesn't follow you across other sites. We measure visits only with cookie-free, aggregate analytics that don't identify you. That's why there's no cookie banner.

Our hosting and security provider may set strictly necessary cookies to protect the site from attacks. They don't track you and are exempt from consent requirements.

We share personal data only with:

• Service providers who run parts of the site for us and act only on our instructions: hosting, content delivery and security (Cloudflare), form processing and storage, email delivery, and the AI model provider used for spam screening. Each is bound by contract to keep your data confidential and secure.
• Professional advisers such as lawyers and accountants, under a duty of confidentiality.
• Authorities, when the law requires it or to protect our rights, our users or the public.
• A buyer or successor, if our business is reorganised, merged or sold, under the same protections as this notice.

We never sell your personal data, and we don't share it for cross-context behavioural advertising. Ask us at info@splicebit.net for the current list of service providers.

We're based in India and work with teams in several countries, and our service providers run infrastructure around the world. Your data may be processed outside the country where you live, including in India, the United States and the European Union.

When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (with the UK Addendum where needed), plus extra safeguards where appropriate. We follow any restriction the Government of India places on transfers to particular countries under the DPDP Act.

• Enquiries that don't lead to work: for as long as we need them to reply and follow up, then we delete them.
• Client records: for the length of our relationship, then for as long as tax, accounting and other laws require.
• Waitlist and beta lists: until the product launches and we've told you, or until you ask to leave, whichever comes first.
• Technical logs: for short periods set by our hosting provider, unless we need them to investigate abuse.

When we no longer need data, we delete it or make it anonymous.

The site is served only over HTTPS. Access to personal data is limited to people who need it for the purposes above, and we choose providers with strong security practices. No system is perfectly secure, so if a breach affects your data we'll tell you and the relevant regulators, including the Data Protection Board of India, as the law requires.

Everyone

Wherever you live, you can ask us to tell you what personal data we hold about you, to correct or delete it, and to stop sending you updates. Where we rely on your consent, you can withdraw it as easily as you gave it; that doesn't affect what we did before.

India

Under the DPDP Act you have the right to a summary of your personal data and how we process it, and of who we've shared it with; to correct, complete, update or erase it; to have your grievances addressed; and to nominate someone to exercise these rights for you if you die or become unable to. If you're not satisfied with how we handle a grievance, you can complain to the Data Protection Board of India.

European Economic Area, United Kingdom and Switzerland

You have the rights of access, rectification, erasure, restriction, data portability and objection (including to processing based on our legitimate interests), and the right to withdraw consent. You can also complain to the data protection authority where you live or work, or where you think the problem happened; in the UK, that's the Information Commissioner's Office.

United States

If you live in California or another state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose, and to correct or delete it. We don't sell or share personal information, so there's nothing to opt out of. We won't treat you differently for using these rights, and you can use an authorised agent.

Everywhere else

You have at least the rights listed under "Everyone", plus any more your local law gives you.

How to use your rights

Email info@splicebit.net. We may need to confirm your identity before acting, and we'll reply within the time your law allows.

In line with the Information Technology Act 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 and the DPDP Act, our Grievance Officer handles concerns about how we process personal data:

• Designation: Grievance Officer
• Email: info@splicebit.net
• Address: Thane, Maharashtra, India

We'll acknowledge your grievance and resolve it within the time the law requires.

splicebit.net is for businesses and adults. It isn't directed at anyone under 18, and we don't knowingly collect their personal data. If you think a child has sent us personal data, tell us and we'll delete it.

When we change this notice, we'll update the date at the top of this page. If a change is significant, we'll say so clearly here, and tell you directly where we can.

Questions about this notice or your data: info@splicebit.net, or write to Splicebit Technologies, Thane, Maharashtra, India. For anything else, use our contact page.