Last updated: 22 July 2026
1. Introduction
1.1 This Privacy Policy explains how Sponsorly (“Sponsorly”, “we”, “us”) collects, uses and shares personal data when you use the Sponsorly website and mobile applications (the “Platform”). Sponsorly is the controller of the personal data described here. By using the Platform you acknowledge this Policy. If you do not agree, please stop using the Platform.
1.2 The Platform is a two-sided marketplace for businesses and professional creators. Much of the data we process is business-contact and transaction data rather than consumer data, but where it identifies an individual this Policy applies.
1.3 Contact: hello@sponsorly.com.
2. The data we collect
2.1 Account and profile data - name, email address, password or third-party sign-in identifier (Apple, Google), display name, avatar, brand or creator profile details, team membership and role.
2.2 Deal and content data - campaigns, briefs, bids, offers, schedules, deliverables, links, files, submitted drafts, approvals, change requests and the messages you exchange with counterparties on the Platform.
2.3 Payment and verification data - payment is handled by Stripe. We receive limited information such as payment status, the last four digits and brand of a card, payout-account status and identifiers, hold and capture status, invoice status and decline reasons. Stripe collects and processes card numbers, bank details and identity/KYC documents directly under its own privacy policy; we do not store full card or bank numbers. Payments on the Platform are for real-world advertising and content-creation services (and any related physical products) between independent businesses, plus our service fee; they are processed through Stripe and not through Apple’s in-app purchase system (see Terms clauses 3.7 and 11.7).
2.4 Connected-account data - if you link a third-party account, we access data you authorise: for YouTube, channel and video metadata and statistics via the YouTube API Services; for Gmail (if you choose to link it), limited data needed for the feature you enable. You can disconnect at any time.
2.5 Device and usage data - device and push identifiers (for notifications via OneSignal), app and browser type, pages and screens viewed, actions taken, IP address, and log, crash and diagnostic data.
2.6 Cookies and similar technologies - used on the website for authentication, preferences, security and analytics. You can control cookies in your browser; some features may not work without them.
2.7 Verification and anti-fraud data - phone number and its verification status, the country you signed up from and the country associated with your phone number, sign-in and device signals, and related indicators used to confirm you are who you say you are, to detect fraud and impersonation, and to warn a counterparty where a sender is unverified or where signals do not match. Some of these indicators are shown to your counterparty in a deal.
2.8 Delivery address data - where a deal involves a physical product, the postal address, recipient name and contact phone number you provide, which we store so you can reuse them on future deals and share with the brand so they can ship to you, together with carrier and tracking details the brand adds.
2.9 Timezone and scheduling data - your profile or device timezone and the dates you set for deliverables, shown to your counterparty so both sides can schedule and coordinate.
2.10 Support and correspondence - messages you send us, reports you file about content or users, and records of our responses.
3. How we use data and our lawful bases
3.1 To provide the Platform - create and manage your account, run discovery, messaging, scheduling, deals and payments, and deliver your information to the counterparties you transact with. Lawful basis: performance of a contract.
3.2 To process payments and fees, operate authorisations, escrow, invoices and payouts, and prevent fraud. Lawful basis: performance of a contract; legitimate interests (fraud prevention, securing the service); legal obligation.
3.3 To send notifications and service messages (push, email and, where you opt in for deal reminders, SMS), and to operate reminders and re-engagement prompts. Lawful basis: legitimate interests; consent where required (e.g. certain marketing or device permissions). You can manage notification preferences in the app and unsubscribe from non-essential email.
3.4 To secure, maintain and improve the Platform, including debugging, analytics, moderation of user content and investigation of abuse. Lawful basis: legitimate interests; legal obligation.
3.5 To verify identity and prevent fraud and impersonation - verifying phone numbers, comparing signup and phone-number countries, flagging unverified or mismatched senders, and displaying those indicators to a counterparty so they can protect themselves before sharing information, shipping products or performing work. Lawful basis: legitimate interests (protecting users and the integrity of the marketplace); legal obligation where anti-money-laundering or know-your-customer rules apply.
3.6 To moderate content and resolve disputes - accessing, reviewing and retaining deal records, messages and submitted content where reasonably necessary to act on a report, investigate suspected breach or fraud, respond to a dispute between users, enforce our Terms, or comply with law. Lawful basis: legitimate interests; legal obligation. We are not obliged to monitor content generally and do not review deals for quality or accuracy.
3.7 To produce aggregated and de-identified statistics about marketplace activity (for example typical pricing, category trends and completion rates), which we may publish or share. Aggregated and de-identified data does not identify you and we do not attempt to re-identify it. Lawful basis: legitimate interests.
3.8 To comply with law and respond to lawful requests, and to establish, exercise or defend legal claims. Lawful basis: legal obligation; legitimate interests.
3.9 We do not sell your personal data, and we do not use it to serve third-party advertising in the Platform.
3.10 We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Automated features such as verification flags, bid rankings, reminders and deal-stage transitions are informational aids and are subject to human decision-making by you and your counterparty.
4. Service providers (processors) we share data with
4.1 We share data with vendors who process it on our behalf to run the Platform, under contracts that restrict their use of it:
4.1.1 Stripe - payment processing, payouts, escrow and identity/KYC verification.
4.1.2 Stream (GetStream) - in-app chat and messaging infrastructure.
4.1.3 Google / Firebase - authentication (including Sign in with Apple and Google), and related services.
4.1.4 OneSignal - push-notification delivery.
4.1.5 Amazon Web Services - cloud hosting and file storage.
4.1.6 Twilio - phone-number verification and SMS delivery.
4.1.7 Email and SMS providers - to send transactional notifications and reminders.
4.1.8 Google / YouTube APIs - to retrieve channel and video data for connected accounts.
4.1.9 Analytics, logging and error-monitoring providers - to measure usage, diagnose faults and maintain security.
4.2 This list may change as our infrastructure changes; we will keep this Policy current and you can ask us for the position at any time.
5. Sharing with other users
5.1 Sponsorly is a two-sided platform. When you transact or communicate with a counterparty, the information reasonably needed for the deal - such as your profile, display name, avatar, the deal terms, deliverables, schedules, timezone, verification indicators and your messages - is shared with that counterparty. Where a deal involves physical delivery, your delivery address, recipient name and contact phone number are shared with the brand for that purpose. Do not share information in messages that you do not want your counterparty to see.
5.2 Counterparties are independent controllers. Once information is shared with a counterparty, that counterparty decides how it uses it and is responsible for its own compliance under its own privacy notice. We do not control their use of it, and requests to access, correct or delete information they hold should be made to them directly. We can tell you what we hold and what was shared.
5.3 Public profiles and showcasing. Your public profile (name or brand name, username, avatar or logo, public bio, public schedule and upcoming slots, and aggregate activity such as deals completed) is visible to anyone, may appear in search engines, and may be displayed or featured by Sponsorly on the Platform, on our website and in our marketing and promotional materials (for example showcases, social media and press) to demonstrate who uses Sponsorly. Lawful basis: legitimate interests. Private messages, private deal terms and amounts, unapproved drafts and brand materials are never used this way. You can object to promotional featuring at any time by emailing hello@sponsorly.com.
5.4 Teams. Where you belong to a brand or creator account with multiple members, other members of that account can see the account’s deals, messages, payment status and related records. Removing a member stops future access but does not delete records of their past activity.
6. Other disclosures
6.1 We may disclose data to comply with applicable law, regulation, legal process or enforceable governmental request; to enforce our Terms; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of Sponsorly, our users or the public. In a merger, acquisition, financing or sale of assets, data may be transferred subject to this Policy. We may also share data with our professional advisers (such as lawyers, accountants and auditors) under duties of confidentiality.
7. YouTube API Services - additional disclosure
7.1 Sponsorly uses YouTube API Services. By using features that connect to YouTube you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms) and acknowledge the Google Privacy Policy (https://policies.google.com/privacy). We use YouTube API data only to provide and improve the connected features (such as showing your channel and video statistics), we do not use it for advertising, and you can revoke our access to your Google data at any time via the Google security settings page (https://myaccount.google.com/permissions) or by disconnecting in the app. YouTube API data we retain is handled in accordance with this Policy and deleted when no longer needed for the feature.
8. International transfers
8.1 We and our providers may process data in countries other than yours. Where we transfer personal data from the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses. Because the Platform is a cross-border marketplace, information shared with a counterparty may be received in their country.
9. Retention
9.1 We keep personal data for as long as your account is active and as needed to provide the Platform, and thereafter as required to comply with legal, tax, accounting, fraud-prevention and dispute-resolution obligations, after which it is deleted or anonymised.
9.2 Deal records, deal messages, payment records and verification data are retained for the life of the deal and for a period afterwards to support those obligations - typically at least six years from the end of the relevant tax year, and longer where a dispute, claim or investigation is live or reasonably anticipated.
9.3 Deleting your account removes or anonymises your profile and stops future processing, but does not delete records your counterparty holds, records we must retain by law, or aggregated and de-identified statistics.
10. Security
10.1 We use technical and organisational measures to protect personal data, including encryption in transit, access controls and use of reputable infrastructure providers. No system is completely secure, and we cannot guarantee absolute security. Keep your credentials confidential and notify us of any suspected unauthorised access.
10.2 If a personal-data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you, in accordance with applicable law.
11. Your rights
11.1 Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact hello@sponsorly.com. You can also delete your account in the app. We may need to verify your identity before acting, and some rights are limited where we must retain data for legal, tax or dispute purposes.
11.2 If you are in the UK or EEA, you have the right to lodge a complaint with a supervisory authority - in the UK, the Information Commissioner’s Office (ico.org.uk).
11.3 If you are a resident of California or another US state with comprehensive privacy legislation (including Virginia, Colorado, Connecticut, Utah and Texas), you may have rights to know, access, correct, delete and port personal information, to opt out of “sale”, “sharing” and targeted advertising, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined, we do not serve targeted advertising in the Platform, and we do not use or disclose sensitive personal information beyond the purposes permitted by law. You may exercise these rights, or appeal a decision on a request, by emailing hello@sponsorly.com.
11.4 We respond to browser “do not track” or global privacy control signals where required by applicable law.
12. Children
12.1 The Platform is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18 (or under 16 in the EEA). If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this Policy
13.1 We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where the change is material, take reasonable steps to notify you.
14. Contact
14.1 Sponsorly - privacy enquiries: hello@sponsorly.com.