Last updated: July 25, 2025
Third Space (“WeSplit”, “we”, “us”, “our”) places the utmost importance on the protection of your personal data. This Privacy Policy is intended to inform you in a clear, simple, and comprehensive manner about how we collect, use, and protect your data in connection with the use of our application and services (the “Service”).
This policy is in compliance with the legislation in force, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation - GDPR) and Law No. 78-17 of January 6, 1978, known as the “Data Protection Act”.
We invite you to read this document carefully to understand our practices and your rights concerning your personal data.
| Company Name | Third Space |
| Legal Form | Simplified Share Business (SAS, Société par Actions Simplifiée) |
| Share Capital | 1 000 € |
| Registered Office | 198 D ROUTE DE NEUVILLE, 01390 SAINT-ANDRE-DE-CORCY, France |
| Registration | Registered with the Bourg-en-bresse Trade and Companies Register (RCS) under the SIREN number: 930682703 |
| Intra-Community VAT Number | FR24930682703 |
| Publication Director | Ms. Pauline Mila-Alonso, in her capacity as President |
| Contact | For any questions or requests for information regarding the service, or to report any illegal content or activities, the user may contact the publisher: Email address: contact@wesplit.io |
In the course of providing the Service, we process different categories of data. It is essential to distinguish between two types of data:
Each data processing operation we perform is based on a specific purpose and a legal basis defined by the GDPR.
| Data Type | Processing Purposes | Legal Basis for Processing |
| Identification and contact data | Creation and management of your user account. Provision of customer support. Sending transactional communications (confirmations, alerts). | Performance of the contract (our General Terms of Use). |
| Identity verification (KYC) data | To comply with our obligations to combat money laundering and terrorist financing (AML/CFT). | Legal obligation. |
| On-Chain Data (Wallet addresses, transactions) | Provision of the core functionalities of the Service: displaying balances, transaction history, facilitating payments and reimbursements. | Performance of the contract (our General Terms of Use). |
| Technical and connection data | To ensure the security of our Service, prevent fraud and abuse. To improve the performance and stability of the application. To produce anonymized statistics for Service improvement. | Legitimate interest of WeSplit to ensure the security and optimization of its service. |
| Contact data (for marketing) | Sending commercial offers, newsletters, and information about our new products. | User's consent. |
It is crucial to understand the specific nature of data recorded on a blockchain.
Public and Pseudonymous Nature: Your wallet address and transaction history are recorded on public ledgers (the Solana and Stellar blockchains). This data is publicly accessible but is pseudonymous: it does not directly reveal your civil identity.
Immutability and Limitation of Your Rights: Due to the immutable and decentralized nature of blockchain technology, transaction data, once validated and recorded, cannot technically be modified or erased. Consequently, your right to erasure (“right to be forgotten”) and your right to rectification cannot apply to transaction data that has been permanently recorded on a blockchain.
These rights remain fully applicable to your Off-Chain data that WeSplit controls (e.g., your email address, your profile data).
We never sell your personal data. However, we may share it with third parties in the following cases:
Some of our processors may be located outside the European Union. In such cases, we ensure that the transfer of your data is governed by appropriate safeguards, such as:
We retain your data for a limited period, defined according to the purpose of the processing.
| Data Category | Retention Period |
| Account data (profile, email) | For the entire duration of the contractual relationship, then archived for a period of 5 years (statutory limitation period). |
| Identity verification (KYC) data | 5 years after the end of the business relationship, in accordance with legal obligations (AML/CFT). |
| Connection logs and technical data | 12 months maximum. |
| Data relating to prospects (non-customers) | 3 years from your last contact. |
| On-Chain data (transactions) | Indefinitely, due to their immutable recording on the blockchain. |
The security of your data is our priority. We implement robust technical and organizational measures to protect your personal data against destruction, loss, alteration, disclosure, or unauthorized access. These measures include:
In accordance with the GDPR, you have the following rights over your personal data (Off-Chain):
To exercise these rights, please contact us at contact@wesplit.io, enclosing proof of identity.
If you believe that your rights have not been respected, you have the right to lodge a complaint with the French Data Protection Authority (CNIL).
When you browse our website or application, cookies may be placed on your device. We use different types of cookies:
During your first visit, an information banner allows you to configure your choices regarding cookies. You can change your preferences at any time via our cookie management tool.
We reserve the right to modify this policy at any time, particularly to comply with legal and regulatory developments. In the event of a substantial change, we will inform you by email or via a notification in the application. The version in force is the one accessible on our website and application.