Privacy Policy

SponsorClub lets fans monthly-sponsor specific items in a creator’s lifestyle. To run the service we collect the minimum data needed for accounts, payments, and the public credit sponsors receive. We do not sell your data.

2.1 From creators

• Email address and password (we store only a salted hash of your password, via Supabase)
• Display name, handle, bio, and avatar image
• Payout-account metadata synced from Stripe (your connected account ID, capability flags, country). We do not store your bank account or government ID — those live with Stripe.
• Usage data: which pages you visit on the dashboard, when you sign in

2.2 From sponsors

Stripe Checkout collects your email, payment method, billing name, and the public display name you choose. Card details never reach our servers — Stripe handles them. From Stripe we receive and store your email, display name, customer ID, subscription ID, and billing status.

2.3 Automatically

• Server logs (IP address, timestamps, user agent) for debugging and abuse prevention
• Session cookies required for sign-in and security
• Moderation audit log entries when a display name is flagged (original text, matched reason, slot ID, Stripe customer ID) — used to tune our moderation system

• To operate the platform (display creator pages, process subscriptions, deliver receipts)
• To send service notifications and support replies
• To moderate publicly displayed content
• To detect and prevent fraud, abuse, and illegal activity
• To comply with legal obligations and tax reporting

• Stripe— processes payments and creator payouts. stripe.com/privacy
• Supabase— hosts our authentication, database, and image storage. supabase.com/privacy
• Vercel— hosts our application. vercel.com/legal/privacy-policy
• Law enforcement or regulators when required by valid legal process

We may also share aggregated, non-identifying data (e.g. total platform volume) for marketing or research.

The following information is publicly visible on creator pages:

• The creator’s handle, display name, bio, and avatar
• The list of sponsorship slots and prices
• Each active sponsor’s chosen display name on the slot they sponsor

Sponsor email addresses, payment information, and billing names are never public.

We use session cookies necessary for sign-in and CSRF protection. We record an anonymous page-view count per creator page (first-party, no third-party trackers, no cookies set for this) so creators can see how many people are visiting their page. We do not currently use advertising trackers or third-party analytics scripts.

SponsorClub is not directed to anyone under 18. We don’t knowingly collect information from minors. If you believe we have, contact us and we will delete it.

• Creator accounts: retained while active. If you delete your account, your profile is removed and your public page is taken down; sponsor records associated with you may be retained as required by tax and accounting law.
• Sponsor records: retained while the subscription is active, plus up to 7 years after cancellation for tax and accounting compliance.
• Stripe data: Stripe retains transaction data per their own policy and applicable law.
• Server logs: retained 30 days unless flagged for security review.

We use HTTPS for all traffic, password hashing via Supabase, row-level security for database access, and rotated webhook signing secrets. No system is perfectly secure; if you suspect your account has been compromised, contact us immediately.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of certain processing

Email support@sponsorclub.me to exercise these rights. We’ll respond within 30 days.

California (CCPA)

You have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your rights. We do not sell personal information.

Europe / UK (GDPR)

Our legal basis for processing is the performance of a contract with you (your account or subscription), our legitimate interest in operating the service, and your consent where required. You may lodge complaints with your local data protection authority.

Your data is processed in the United States. By using SponsorClub from outside the US, you consent to this transfer.

We may update this Privacy Policy from time to time. Material changes will be announced via email or in-product notice at least 14 days before they take effect.

Privacy questions: support@sponsorclub.me