SplitraySplitray

Privacy Policy

Last updated: March 1, 2026

Splitray ("we," "us," or "our") operates the webhook proxy service available at splitray.app. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

By using Splitray, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you create a Splitray account, we collect:

  • Email address — used for authentication, account recovery, and service-related communications.
  • Name (if provided) — used to personalize your account.
  • Password — stored as a securely hashed value. We never store plaintext passwords.

Usage Data

We automatically collect certain information when you interact with our service:

  • Webhook delivery metadata — timestamps, HTTP status codes, destination URLs, delivery attempts, and response times. This data is used to provide delivery tracking and retry functionality.
  • API request logs — IP addresses, request timestamps, and endpoint paths for security monitoring and abuse prevention.
  • Device and browser information — browser type, operating system, and screen resolution collected through standard HTTP headers.

Billing Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details. We receive and store only:

  • The last four digits of your card for display purposes.
  • Your billing email and subscription status.

What We Do NOT Collect

Splitray does not read, inspect, store, or log the contents of your webhook payloads. Your webhook data passes through our infrastructure transparently and is forwarded directly to your configured destinations. We have zero knowledge of what is inside your payloads. This is a core architectural principle of our service.

2. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the service — route webhooks, track deliveries, and retry failed deliveries.
  • Authenticate your account — verify your identity when you log in.
  • Process payments — manage subscriptions and billing through Stripe.
  • Send service communications — notify you about delivery failures, account issues, or important service updates.
  • Monitor and improve the service — analyze usage patterns to improve reliability, performance, and user experience.
  • Prevent abuse — detect and block malicious or unauthorized use of the platform.

We do not use your information for advertising. We do not build user profiles for marketing purposes.

3. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We share data only with the following categories of service providers, strictly as necessary to operate Splitray:

  • Stripe — for payment processing. Stripe's privacy policy governs their handling of your payment data.
  • Resend — for transactional email delivery (account verification, password resets, delivery failure alerts).
  • Infrastructure providers — hosting and cloud services that process data on our behalf under strict data processing agreements.

We may also disclose information if required by law, regulation, or legal process, or if necessary to protect the rights, safety, or property of Splitray, our users, or the public.

4. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit — all connections to Splitray use TLS/HTTPS. We enforce HTTPS for all API and dashboard traffic.
  • Encryption at rest — sensitive data stored in our databases is encrypted at rest.
  • Secure authentication — passwords are hashed using modern, salted hashing algorithms. Session tokens are cryptographically generated.
  • Access controls — internal access to production systems is restricted and logged.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Cookies

Splitray uses a minimal set of cookies:

  • Authentication cookies — session cookies that keep you logged in. These are essential for the service to function and cannot be disabled.
  • Theme preference — a cookie that stores your light/dark mode preference for the dashboard.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking.

6. Data Retention

  • Account data — retained as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., billing records).
  • Webhook delivery metadata — retained according to your plan's retention period (e.g., 24 hours for free plans, longer for paid plans). After the retention period, delivery logs are permanently deleted.
  • Server logs — access and error logs are retained for up to 90 days for security and debugging purposes, then automatically purged.

7. Your Rights

You have the following rights regarding your personal data:

  • Access — you can view all personal data associated with your account through the dashboard settings.
  • Correction — you can update your account information at any time through the dashboard.
  • Deletion — you can delete your account and all associated data from the dashboard settings. Account deletion is permanent and cannot be undone.
  • Data export — you can export your account data and webhook configuration in a machine-readable format.
  • Objection — you can object to specific processing activities by contacting us.

To exercise any of these rights, you can use the self-service options in your dashboard or contact us at contact support.

8. International Data Transfers

Splitray's infrastructure may process data in multiple regions. When data is transferred across borders, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

9. Children's Privacy

Splitray is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on our website. Your continued use of Splitray after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact support or reach us at:

Bilustek, LLC

2261 Market Street STE 86996
San Francisco, CA 94114
+1 (320) 317-7912
https://bilustek.com/

Registered Office

131 Continental Dr, Suite 305
Newark, DE 19713

splitray.app