Privacy Policy

Overview

ClearSplit is a web-based tool for managing the financial side of divorce. We process case and account information so authorized users can organize assets, debts, income, and expenses, generate settlement-document drafts, and produce export bundles for review. This policy explains what data we collect, how we use it, and the rights you have over your information.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. We never store passwords in readable form.

Case Data

Users enter case information including asset descriptions, debt balances, income sources, expense records, party names, and uploaded documents. All uploaded documents are encrypted at rest using per-case encryption keys and stored in cloud object storage. Case data is accessible only to users with valid case membership.

Operational Data

We log login attempts (IP address and timestamp), audit history (who changed what and when), billing events, and technical metadata necessary for security monitoring and service performance.

Payment and Connected-Account Information

Payment processing is handled by Stripe. We do not store full card numbers or CVVs. Direct bank linking is disabled in the current release. If an optional connected-account import is enabled later, the connection screen and this policy will identify the provider and data involved before you consent.

How We Use Information

• Provide secure case access and role-based collaboration controls
• Generate settlement calculations, balance sheets, MSA documents, and court export bundles
• Maintain case activity history for authorized review and security operations
• Process case purchases or professional subscriptions and manage access periods
• Detect and prevent unauthorized access through rate limiting and login monitoring
• Send transactional emails including password resets, case invitations, and purchase receipts

Data Sharing

We do not sell or rent your data, and we do not use your case data, documents, or other personal information to train artificial-intelligence or machine-learning models. Any AI-assisted features operate only to produce output for your own case at your direction. We do not use third-party advertising trackers, and we do not run third-party analytics on pages where you are signed in or where case data appears. Data is shared only with the service providers we need to operate the platform:

• Stripe — payment processing, governed by Stripe's Privacy Policy. We never see or store your card number.
• Fly.io — application and database hosting.
• Backblaze — encrypted document object storage. Documents are encrypted with per-case keys before they are written to storage, so the storage provider holds only ciphertext.
• Resend — delivery of transactional email (password resets, case invitations, receipts). Recipient address and message content pass through this provider.
• Sentry — error monitoring, configured not to receive personally identifying request data.
• Plaid — optional bank-connection and transaction-import services, only if the direct-link feature is enabled and you choose to use it. Direct linking is disabled in the current release.
• Legal requirements — when required by law, subpoena, or valid court order.

If we add or change a service provider that processes your data, we will update this policy.

Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Per-case envelope encryption for all uploaded documents
• Hashed password storage using scrypt key derivation
• CSRF protection on all form submissions
• Rate limiting on authentication endpoints
• Security headers (CSP, HSTS, X-Frame-Options)
• Role-based access control with party-scoped data visibility

Data Retention

At the end of an applicable active period, a case may transition to a read-only archive; archiving is not a deletion request. After a verified deletion request, a 90-day recovery window begins. By day 90, affected active records are removed and the applicable encryption keys are destroyed. Object-Lock ciphertext may persist for its configured retention period and is unreadable using live key material after crypto-erasure. Backups taken before your deletion still contain per-case key material until those backups age out of retention; our Retention Policy states that window precisely. Audit and minimum legal/security records may be retained under the restricted schedule described in our Retention Policy.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Case creators may export all case data via the built-in CSV, JSON, or PDF export features before requesting account deletion.

Depending on your state of residence (for example, under the California Consumer Privacy Act or comparable state laws), you may have additional rights, including the right to know what personal information we hold, the right to deletion, and the right not to be discriminated against for exercising these rights. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no "Do Not Sell" process to opt out of. To exercise any of these rights, contact us at the address below; we may need to verify your identity before responding.

Legal and Professional Notice

Contact

Privacy and data protection inquiries: legal@clearsplit.com