Privacy Policy

1. Data we collect

• Account data: your name, email, and organization details.
• Creator profiles: names, handles, channels, audience details, avatars, and rate cards that creators or the brands working with them provide.
• Deal content: briefs, scripts, comments, preview links, uploaded files, and payment records (amounts and the invoiced/paid/received state the parties declare).
• Tracked-link data:clicks on sponsored links, including a salted hash of the visitor's IP address (we never store the raw IP) and the browser user agent, plus the conversions brands report.
• Product analytics: page views and feature usage via PostHog, used to improve the product.

2. The attribution cookie (tabs_cid)

When you follow a sponsored link, sponsr's redirect sets a first-party cookie named tabs_cidcontaining a random click identifier, and appends the same identifier to the destination URL. It contains no personal information by itself. Its purpose is conversion attribution: if you later sign up or buy on the brand's site, the brand can report that conversion to sponsr with the identifier, and it is attributed to the creator's link. Brands may include customer details they hold (email, name, or an internal id) with a conversion.

The attribution window is 30 days from the click. You can avoid or end this tracking by blocking or clearing cookies for sponsr.dev; the link still works without it.

3. Processors and sharing

We share data only with the processors that run the service:

• Supabase (database, authentication, file storage)
• Vercel (hosting)
• Resend (transactional email)
• PostHog (product analytics)
• Anthropic (AI drafting of briefs from text a brand provides for that purpose)

Within the product, brands and creators see the deal content shared with them: a creator sees the briefs, comments, and records of their own deals, and a brand sees the same for its workspace. We do not sell personal data, and we do not share it with third parties beyond the processors above except where the law requires.

4. Cookies

• Authentication cookies keep you signed in.
• tabs_cid is the attribution cookie described in section 2.
• Analytics (PostHog) helps us understand feature usage.

See the Cookie Policy for the full inventory. You can control cookies through your browser settings; blocking authentication cookies will prevent sign-in.

5. Data retention

Account and deal records are kept while your account is active, because they are the deal history both sides rely on. Click and conversion data is kept to preserve attribution reporting for the deals it belongs to. If you close your account, we delete or de-identify your personal data within a reasonable period, except where we must keep it for legal, security, or dispute reasons. Aggregated, de-identified data may be retained.

6. Your rights

Depending on where you live, you may have rights under India's Digital Personal Data Protection Act, the GDPR (EU and UK), or the CCPA (California): to access the personal data we hold about you, correct it, delete it, receive a copy, or object to certain processing. To exercise any of these, email help@sponsr.dev. We will verify the request comes from the account holder before acting on it, and respond within the timelines the applicable law sets.

7. Children

sponsr is a business tool and is not directed to children. You must be at least 18 to use it. If we learn an account belongs to someone under 18, we will close it and delete the associated personal data.

8. Contact and grievance officer

Privacy questions and requests: help@sponsr.dev. For the purposes of India's DPDP Act, the grievance officer can be reached at the same address; we acknowledge grievances promptly and aim to resolve them within the statutory timelines.

9. Governing law

This policy is governed by the laws of India, with the courts of Uttarakhand, India having jurisdiction. If you use sponsr from outside India, your data is processed on infrastructure operated by the processors listed above, which may be located in other countries; we rely on their standard safeguards for those transfers.

This policy may be refined as legal review completes; material changes will be announced in the product.