Last updated: 30 June 2026
1. Introduction
1.1 This Privacy Policy explains how Sponsorly (“Sponsorly”, “we”, “us”) collects, uses and shares personal data when you use the Sponsorly website and mobile applications (the “Platform”). Sponsorly is the controller of the personal data described here. By using the Platform you acknowledge this Policy. If you do not agree, please stop using the Platform.
1.2 Contact: hello@sponsorly.com.
2. The data we collect
2.1 Account and profile data - name, email address, password or third-party sign-in identifier (Apple, Google), display name, avatar, brand or creator profile details, team membership and role.
2.2 Deal and content data - campaigns, briefs, bids, offers, schedules, deliverables, links, files and the messages you exchange with counterparties on the Platform.
2.3 Payment and verification data - payment is handled by Stripe. We receive limited information such as payment status, the last four digits and brand of a card, payout-account status and identifiers. Stripe collects and processes card numbers, bank details and identity/KYC documents directly under its own privacy policy; we do not store full card or bank numbers. Payments on the Platform are for real-world advertising and content-creation services (and any related physical products) between independent businesses, plus our service fee; they are processed through Stripe and not through Apple’s in-app purchase system (see Terms clauses 3.7 and 10.7).
2.4 Connected-account data - if you link a third-party account, we access data you authorise: for YouTube, channel and video metadata and statistics via the YouTube API Services; for Gmail (if you choose to link it), limited data needed for the feature you enable. You can disconnect at any time.
2.5 Device and usage data - device and push identifiers (for notifications via OneSignal), app and browser type, pages and screens viewed, actions taken, IP address, and log and diagnostic data.
2.6 Cookies and similar technologies - used on the website for authentication, preferences, security and analytics. You can control cookies in your browser; some features may not work without them.
3. How we use data and our lawful bases
3.1 To provide the Platform - create and manage your account, run discovery, messaging, scheduling, deals and payments, and deliver your information to the counterparties you transact with. Lawful basis: performance of a contract.
3.2 To process payments and fees and prevent fraud. Lawful basis: performance of a contract; legitimate interests (fraud prevention, securing the service); legal obligation.
3.3 To send notifications and service messages (push, email and, where you opt in for deal reminders, SMS), and to operate reminders and re-engagement prompts. Lawful basis: legitimate interests; consent where required (e.g. certain marketing or device permissions). You can manage notification preferences in the app and unsubscribe from non-essential email.
3.4 To secure, maintain and improve the Platform, including moderation of user content and investigation of abuse. Lawful basis: legitimate interests; legal obligation.
3.5 To comply with law and respond to lawful requests, and to establish, exercise or defend legal claims. Lawful basis: legal obligation; legitimate interests.
3.6 We do not sell your personal data, and we do not use it to serve third-party advertising in the Platform.
4. Service providers (processors) we share data with
4.1 We share data with vendors who process it on our behalf to run the Platform, under contracts that restrict their use of it:
4.1.1 Stripe - payment processing, payouts and identity/KYC verification.
4.1.2 Stream (GetStream) - in-app chat and messaging infrastructure.
4.1.3 Google / Firebase - authentication (including Sign in with Apple and Google), and related services.
4.1.4 OneSignal - push-notification delivery.
4.1.5 Amazon Web Services - cloud hosting and file storage.
4.1.6 Email and SMS providers - to send transactional notifications and reminders.
4.1.7 Google / YouTube APIs - to retrieve channel and video data for connected accounts.
5. Sharing with other users
5.1 Sponsorly is a two-sided platform. When you transact or communicate with a counterparty, the information reasonably needed for the deal - such as your profile, display name, avatar, the deal terms, deliverables and your messages - is shared with that counterparty. Do not share information in messages that you do not want your counterparty to see.
5.2 Public profiles and showcasing. Your public profile (name or brand name, username, avatar or logo, public bio, public schedule and upcoming slots, and aggregate activity such as deals completed) is visible to anyone, may appear in search engines, and may be displayed or featured by Sponsorly on the Platform, on our website and in our marketing and promotional materials (for example showcases, social media and press) to demonstrate who uses Sponsorly. Lawful basis: legitimate interests. Private messages, private deal terms and unapproved drafts are never used this way. You can object to promotional featuring at any time by emailing hello@sponsorly.com.
6. Other disclosures
6.1 We may disclose data to comply with applicable law, regulation, legal process or enforceable governmental request; to enforce our Terms; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of Sponsorly, our users or the public. In a merger, acquisition or sale of assets, data may be transferred subject to this Policy.
7. YouTube API Services - additional disclosure
7.1 Sponsorly uses YouTube API Services. By using features that connect to YouTube you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms) and acknowledge the Google Privacy Policy (https://policies.google.com/privacy). We use YouTube API data only to provide and improve the connected features (such as showing your channel and video statistics), we do not use it for advertising, and you can revoke our access to your Google data at any time via the Google security settings page (https://myaccount.google.com/permissions) or by disconnecting in the app. YouTube API data we retain is handled in accordance with this Policy and deleted when no longer needed for the feature.
8. International transfers
8.1 We and our providers may process data in countries other than yours. Where we transfer personal data from the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or the EU Standard Contractual Clauses.
9. Retention
9.1 We keep personal data for as long as your account is active and as needed to provide the Platform, and thereafter as required to comply with legal, tax, accounting and dispute-resolution obligations, after which it is deleted or anonymised.
10. Security
10.1 We use technical and organisational measures to protect personal data, including encryption in transit, access controls and use of reputable infrastructure providers. No system is completely secure, and we cannot guarantee absolute security. Keep your credentials confidential and notify us of any suspected unauthorised access.
11. Your rights
11.1 Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact hello@sponsorly.com. You can also delete your account in the app.
11.2 If you are in the UK or EEA, you have the right to lodge a complaint with a supervisory authority - in the UK, the Information Commissioner’s Office (ico.org.uk).
11.3 If you are a California resident, you have rights under the CCPA/CPRA, including to know, delete and correct personal information and to opt out of “sale” or “sharing”. We do not sell or share personal information as those terms are defined, and we do not discriminate against you for exercising your rights.
12. Children
12.1 The Platform is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18 (or under 16 in the EEA). If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this Policy
13.1 We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where the change is material, take reasonable steps to notify you.
14. Contact
14.1 Sponsorly - privacy enquiries: hello@sponsorly.com.