Privacy Policy
Last updated: 1 June 2026
This policy explains what personal information Splatimation collects when you use the platform, why we collect it, the legal basis for using it, and the rights you have over it. If anything is unclear, contact us at privacy@splatimation.com.
Who we are
Splatimation is a service provided by Ontia Ltd ("Ontia", "we", "us"), a company registered in England and Wales (company number 16999002), registered office 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. Ontia Ltd is the data controller for the personal data processed through Splatimation. Splatimation provides browser-based tools for animating 3D Gaussian splats and publishing them as interactive tours.
For any privacy question or to exercise your rights, contact our privacy team at privacy@splatimation.com.
Information we collect
- Account details. When you sign up we store your email address and, if provided, your display name and avatar. If you sign in with Google, we receive your name, email and profile image from Google. We also record the version of our Terms and Privacy Policy you accepted at sign-up and that you confirmed you are 16 or older.
- Content you create. The splat files, projects, tours, thumbnails, audio, images and settings you upload or generate, so we can store and display them for you. See "Imagery of other people" below.
- Billing information. Payments are processed by Stripe. We do not store your full card details; we keep a record of your plan, subscription status, our payment provider's customer reference, and your purchase and sales history.
- Usage and device data. Basic technical information such as browser type and device, needed to operate and secure the service. We record active sessions per account (including your browser's user-agent string) to enforce device limits and let you sign out other devices.
- AI assistant ("Splatbot") conversations. If you use our in-app assistant, we process and retain the messages you send and the replies you receive. See "Our AI assistant" below.
- Sales enquiries. If you contact us about an Enterprise plan, we store the name, work email, company, team size and details you provide so our sales team can respond.
How we use your information and our legal basis
Under UK GDPR and EU GDPR we rely on the following legal bases:
- To provide the service — store your content, render your tours, run your account and the marketplace. Legal basis: performance of our contract with you.
- To process payments, subscriptions and marketplace transactions. Legal basis: performance of our contract and compliance with legal/tax obligations.
- To secure accounts, prevent abuse, and operate the AI assistant within fair-use limits. Legal basis: our legitimate interests in running a safe, sustainable service.
- To respond to sales enquiries you initiate. Legal basis: our legitimate interests / taking steps at your request before a contract.
- To send essential service messages (email confirmation, password resets, important account notices). Legal basis: performance of our contract.
We do not sell your personal data, and we do not use it for advertising.
Our AI assistant
Splatbot is powered by Anthropic. When you send a message, its text (and the recent conversation) is sent to Anthropic to generate a reply, and we store the message and reply to apply fair-use limits and to review and improve the assistant. Please do not enter sensitive personal information into Splatbot. Anthropic processes this data as our service provider and does not use it to train its models under our commercial terms.
Sharing your content
Projects and tours are private by default. Content becomes visible to others only when you set it to public, list it on the marketplace, or share a link. You control this from your project and tour settings.
Imagery of other people
A Gaussian splat is a 3D capture of a real-world scene, which may include recognisable people, vehicles or private property. If you upload such content, you are responsible for having the right to do so (see our Terms). If you appear in, or own property shown in, content published on Splatimation and want it removed, email privacy@splatimation.com and we will review and act on your request.
Service providers (sub-processors)
We use trusted third parties to run the platform. They process personal data on our behalf under data processing agreements:
- Supabase — authentication, database and file storage.
- Stripe — payment and subscription processing.
- Anthropic — the Splatbot AI assistant.
- Cloudflare — hosting, content delivery and custom-domain publishing.
- Google — "Sign in with Google" (only if you use it).
- Resend and Amazon Web Services (SES) — sending transactional email.
International transfers
Some of our service providers are based outside the UK/EEA (for example, in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum and the EU Standard Contractual Clauses, or an adequacy decision where one applies.
Data retention
We keep personal data only as long as we need it:
- Account and content — while your account is active. When you delete your account we remove your content and personal data within 30 days, and from routine backups within a further 30 days.
- Financial and tax records (invoices, transactions) — up to 6 years, as required by law, even after account deletion.
- Splatbot conversations — message content for up to 90 days; aggregate usage records (for billing and limits) for up to 24 months.
- Viewing analytics — up to 24 months.
- Sales enquiries — up to 24 months from our last contact, unless you ask us to delete them sooner.
- Security and operational logs — typically up to 90 days.
Your rights
Depending on where you live, you have the right to access, correct, delete, export (port) and restrict the use of your personal data, to object to processing based on legitimate interests, and to withdraw consent where we rely on it. You can edit your profile and delete your account from your account settings, or email privacy@splatimation.com. We will respond within one month.
If you are in the UK or EEA and believe we have not handled your data properly, you have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ICO), ico.org.uk.
Cookies and local storage
We use only strictly necessary cookies and browser local storage to keep you signed in and remember your preferences. We do not use advertising or third-party tracking cookies, so no cookie consent banner is required. If we introduce analytics or tracking in future, we will ask for your consent first.
Children
Splatimation is not intended for children under 16, and you must confirm you are 16 or older to create an account. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will revise the "last updated" date above and, for material changes, provide a clearer notice.
Contact
Questions about privacy, or to exercise your rights? Email privacy@splatimation.com, or write to Ontia Ltd at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.