Privacy Policy

Last updated: July 16, 2026

Not legal advice. This is a plain-English draft matching what SponsorScout actually collects and stores today.

1. Introduction

This Privacy Policy explains how SponsorScout (“we,” “us,” “our”) collects, uses, and protects information when you use SponsorScout (the “Service”) to purchase and receive vetted sponsorship-opportunity leads.

2. What we collect

We collect the minimum needed to sell and deliver leads:

  • Order information. The email address you check out with, the niche/industry you selected, and optionally a geography/metro filter. This is everything we need to generate and deliver your batch of opportunity cards.
  • Account information (only if you create an account). Your email address, name (if provided), and a salted hash of your password — we never store passwords in plain text.
  • Payment information. Payments are handled by Polar, our Merchant of Record. Polar collects and stores your card details; we receive only what’s needed to confirm your order was paid (order status and a Polar order/customer identifier). We never see or store your full card number.
  • Usage data. Basic request logs (timestamps, IP address, user agent, URL paths, response codes) for security, abuse prevention, and debugging.
  • Support communications. Anything you send us via chat, email, or the “report a dud” flow, plus our replies.

We do not collect a mailing address, phone number, or any information beyond what’s listed above unless you choose to give it to us in a support message.

3. How we use it

We use your information to: generate and deliver your ordered leads; verify your purchase; process a dud-replacement or refund if you report one; respond to support requests; detect and prevent abuse of the per-lead buyer caps; and understand product usage in aggregate so we can improve the Service.

We do not sell your personal information. We do not share it with data brokers or advertisers, and we do not run third-party advertising on the Service.

4. What we do not do — AI training

We do not use your order details, account information, or support communications to train, fine-tune, or otherwise improve any machine-learning model, ours or a third party’s. Where we use AI internally to research and verify sponsorship leads, we process publicly available organization data, not your personal information, and we configure any third-party AI providers we use to disable training on our data.

5. Sharing and subprocessors

We use a small number of vendors to operate the Service, each contractually limited to processing data on our instructions:

  • Hosting and infrastructure — serverless compute and database that run the Service (Cloudflare Workers + D1).
  • Payment processing — Polar, our Merchant of Record, handling billing, taxes, and refunds.
  • Transactional email — the provider that sends your order confirmation, delivery, and dud-replacement emails.
  • Product analytics — minimal first-party-style analytics (page views, no cross-site ad tracking) to understand which parts of the Service are used.
  • Customer support — the platform that receives and routes support chat and email.

6. Data retention and deletion

You can request deletion of your order/account data at any time by emailing privacy@sponsorlinkscout.com. When you do, we delete the personal information tied to your order (email, niche/geo selection) and any account record, subject to a default 30-day window for operational backups to cycle out, and narrow exceptions for records we’re required to keep (e.g., payment records Polar or law requires for a period). Order records that identify the sponsorship leads delivered may be retained in de-identified form for quality tracking (e.g., “was this org’s card ever reported as a dud”) without your email attached.

7. Children

The Service is not directed at children and is not useful to them (it’s a B2B research tool for marketers/site owners). We do not knowingly collect information from children under 13 (US) or 16 (EU). If we learn a child has placed an order or created an account, we will delete the associated data.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. Contact privacy@sponsorlinkscout.com to exercise any of these rights — it’s free, and we won’t retaliate against you for asking.

For California residents, the two designated methods for a CCPA/CPRA request are: (a) email to privacy@sponsorlinkscout.com, and (b) our support chat widget on the site.

9. International users

We operate the Service from outside the European Economic Area. If a lawyer determines an EU Article 27 representative is required given our EU customer volume, that contact will be added here before EU marketing begins. (Not yet appointed — see flagged items below.)

10. Cookies and similar technologies

We use session cookies to keep you signed in (if you have an account) and a minimal first-party analytics script to understand aggregate product usage. We do not run third-party advertising trackers or cross-site ad cookies.

11. Security

We use password hashing, HTTPS encryption in transit, and access controls on our production systems. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and any required regulator as applicable law requires.

12. Changes to this Policy

We’ll post material changes here with an updated date and, where practical, email recent customers.

13. Contact

Privacy questions or requests: privacy@sponsorlinkscout.com