Privacy Policy

This policy covers the Sponsmi website at sponsmi.com and the Sponsmi iPhone app. Both are run by Sponsmi, Inc. in Las Vegas, Nevada, and both use the same account and the same database, so everything below applies wherever you signed in.

What we collect

Account information. Your email address and a password stored as a hash. If you sign in with Google or Apple we receive your email address and name from them rather than a password. If you verify a phone number we store that number.

Your profile and content. Everything you choose to publish: name, sport or niche, location, social handles and follower counts, rates, bio, and photos, plus the listings, sponsorship opportunities, offers, messages, attachments, and reviews you create on the platform. Photos you upload are re-encoded in your browser or app before they reach us, which strips embedded camera metadata such as GPS location.

Payment information. Deals are processed by Stripe. Your full card number never reaches Sponsmi servers. If you take payouts we hold the identifiers Stripe gives us for your connected account, and we keep a record of each transaction: amount, date, counterparty, and status.

Technical information. IP address and basic request data when you use the site, used for rate limiting and abuse prevention. If you turn on push notifications in the app we store a device token so we can send them. We use Vercel Analytics, which counts page views without cookies and without building a profile of you; we run no advertising trackers and no third-party ad pixels.

Messages to us. Anything you send through the contact form or by email, including your name and email address.

How we use it

To run the marketplace: showing your public profile to other users, delivering messages and offers, processing deal payments, sending the account emails you need (confirmation, password reset, offer and deal notifications), preventing fraud and abuse, answering your support requests, and improving the product. We do not sell your personal information, and we do not share it with advertisers.

What's public

Your profile, including your sport or niche, location, reach, rates, and reviews, is publicly visible. That's how you get discovered. Your messages, offers, deal amounts, transactions, and phone number are private to you and, where relevant, your counterparty. Your email address is never shown publicly.

Who we share with

Service providers that run the platform. Each one processes your data only to provide its service to us, and none of them are permitted to use it for their own purposes:

• Supabase: database, file storage, and authentication.
• Vercel: website hosting and privacy-friendly analytics.
• Stripe: payments, holding deal funds until release, payouts, and identity verification for payouts.
• Resend: delivery of account and notification emails.
• Twilio: delivery of phone verification codes by SMS.
• Cloudflare: the Turnstile check that keeps bots off our sign-up and sign-in forms.
• Apple: Sign in with Apple, and purchases made inside the iPhone app.
• RevenueCat: records which subscription you hold when you buy Sponsmi Pro in the app.
• Expo: app updates and delivery of push notifications.
• Google: Sign in with Google, if you use it.

We may also disclose information if we are required to by law, or where we believe it is necessary to investigate fraud or to protect someone's safety.

Emails you can turn off

The daily digest of matching sponsorship opportunities is optional. Every digest has a one-click unsubscribe link, and turning it off does not affect the account emails you need, such as password resets and notifications about your own deals. Push notifications can be turned off in your phone's settings or in the app.

How long we keep it

Your account data is kept while your account is open. When you ask us to delete your account we remove your profile and content, normally within 30 days, and keep only what we are legally required to keep: records of completed transactions, which tax and anti-fraud rules require us to retain for up to seven years, and a minimal record that an account was closed for abuse where that is needed to stop it being recreated. Contact form messages are kept for up to two years.

Security

Data is encrypted in transit and at rest by our providers. Access to the platform database is restricted by row-level security rules, so users can only read what they are entitled to read. Passwords are hashed and checked against known breached-password lists. No system is perfect, and we will tell affected users promptly if we discover a breach that puts their data at risk.

Your choices and rights

You can edit or remove your profile information at any time from your settings. You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and its data. You can delete your account yourself at any time from Settings in the Sponsmi iOS app, under Delete account. You can also ask us through the contact page or by emailing the address below, and we will respond within 30 days. Deals with funds still held have to be finished or cancelled first, because the money has to go somewhere. We will not treat you differently for exercising any of these rights. Cookies on Sponsmi are strictly functional, which means keeping you signed in; we set no advertising or cross-site tracking cookies.

Where your data is held

Sponsmi is operated from the United States and our providers store data on servers in the United States. If you use Sponsmi from outside the US, you are sending your information to the US, where privacy laws differ from those in your own country.

Children

Sponsmi is for adults. You must be 18 or older to create an account, we do not knowingly collect data from anyone under 18, and we delete an account and its data when we learn it belongs to a minor. If you believe a minor has an account, tell us at the address below.

Changes to this policy

If we change this policy we will post the new version here with a new date. If the change materially affects how we handle your personal information we will also tell you by email or in the app before it takes effect.

Contact

Privacy questions, or a request about your data? Email support@sponsmi.com or use the contact page. Sponsmi, Inc., Las Vegas, Nevada, USA.