Last updated: 22 August 2026
This policy explains what personal data Splitstick collects, why, and what rights you have over it. Splitstick is built for scanning and organising receipts and invoices for UK tax purposes, and this policy is written with that specific, narrow purpose in mind.
Splitstick is operated by Thedropzone Ltd, a company registered in England and Wales (company number 16329867), whose registered office is at 48 Moorside Business Park, Moorside, Colchester, England, CO1 2ZF, trading as Splitstick. For the purposes of UK GDPR, this is the "data controller" responsible for your personal data.
Contact: hello@splitstick.uk
| Category | What |
|---|---|
| Account details | Email address, hashed password (never the password itself), business name if you provide one |
| Scanned documents | The receipt/invoice photos or PDFs you upload, and the data our AI reads from them - date, supplier name, amount, VAT, and a short description. These may occasionally contain personal data if it appears on the document itself (for example, a named individual on an invoice) |
| Technical data | IP address (used only to prevent abuse - see Section 6), browser/device type, login timestamps |
| WhatsApp details | Only if you choose to connect a phone: your phone number and WhatsApp display name, so we know which account a receipt sent over WhatsApp belongs to. See Section 4a |
| Subscription details | Your subscription status, trial and renewal dates, and an identifier linking your account to your record at our payment processor |
| Support contact | Anything you send us directly, e.g. by email |
We never see or store your card details. Payments are handled entirely by Stripe, who take your card details directly and tell us only whether the subscription is paid, trialing or lapsed. Your card number never reaches our servers.
We do not use your data for advertising, and we do not sell it to anyone.
Each document you scan is sent securely to Anthropic's Claude API, which reads it and returns the structured data you see in the app (date, supplier, amounts, category). This is the core of how Splitstick works - without it, documents couldn't be read automatically.
Two things follow from that, and both are in your favour:
To be straight with you about the limits of that promise: those are Anthropic's terms, not ours, and a third party can change its terms. We check them, and if they ever change in a way that affects your documents we'll update this policy and tell existing account holders by email before it takes effect, as Section 11 says.
Connecting a phone to Splitstick on WhatsApp is entirely optional, and nothing about it is switched on unless you choose it in Settings. If you do connect one, three extra things apply:
We use a small number of specialist service providers ("processors") to run Splitstick. None of them can use your data for their own purposes - they only process it on our instructions, to provide their service to us.
| Provider | What they do | Where |
|---|---|---|
| Anthropic | Reads scanned documents (AI) | United States |
| Render | Hosts the application and database | EU (Frankfurt, Germany) |
| Backblaze | Stores encrypted off-site backups | United States |
| Resend | Sends account emails (verification, password reset, login codes) | European Union (Ireland) |
| Meta Platforms (WhatsApp) | Carries receipts and replies, only if you connect a phone to WhatsApp | United States / Ireland |
| Stripe | Takes subscription payments and holds your card details | United States / Ireland |
Where a provider is based outside the UK, we rely on the safeguards required by UK GDPR for international transfers (such as Standard Contractual Clauses) - you should confirm each provider's current transfer mechanism directly with them, since this can change over time.
We do not share your data with any other third party, and never with other Splitstick customers - every account's documents are strictly isolated from every other account.
Under UK GDPR you have the right to:
Splitstick is a business tool and is not directed at, or intended for use by, anyone under 18.
If you're unhappy with how we've handled your data, please contact us first at the address in Section 1 so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
If we make material changes to this policy, we'll let existing account holders know by email before the changes take effect.
This document is not legal advice. It has been prepared in good faith and describes how Splitstick actually operates, but we recommend having it reviewed by a solicitor.