← Home

Privacy Notice

Sponeach · Last updated: September 2026

1. Who we are

Sponeach is a creator business workspace: software that helps creators publish a public My Page, receive brand inquiries, manage Deals, Quotes, Inbox, and Earnings, and optionally subscribe to Creator Pro.

Sponeach is not an agency, marketplace, escrow, payment processor for campaign fees, or employer. Campaign payments between creators and brands stay off-platform. Creator Pro subscription billing is separate and processed through Razorpay.

Formal legal entity name and registered address are owner/counsel inputs and are published when confirmed. Until then, reach us via Contact.

2. What this notice covers

This notice describes personal and related data processed when:

  • a creator creates an account and uses the Sponeach workspace;
  • a brand / brand contact submits an inquiry on a published My Page or uses an inquiry status link;
  • visitors load public marketing pages or a published My Page.

It does not cover contracts or payments between creators and brands for sponsorship work.

3. Creator account and profile data

Depending on how you sign up and what you enter, we may process:

  • account email and authentication identifiers (including optional password credentials via Supabase Auth);
  • Google OAuth name and avatar URL when you use Google sign-in;
  • account name, slug, niche, bio, audience/engagement/platform information, social handles;
  • portfolio / media-kit style information (samples, featured work, testimonials, brands you’ve worked with);
  • packages, pricing signals, scheduling URL, preferred currency, and related My Page fields;
  • timezone, locale, or country fields if stored for your account settings;
  • inquiry and deal records, quotes/proposals (including versions), closing/proposed amounts you enter;
  • creator-entered Collections records (payment status, amounts, due dates you record);
  • first-party analytics / product telemetry events;
  • billing and subscription records for Creator Pro (and founding/comped grants if issued);
  • support or contact messages you send us.

4. Brand / brand-contact data

When someone submits a campaign brief we may store, for example:

  • brand name, contact name, email, website/handle/domain where provided;
  • campaign type, deliverables, budget range, timeline, usage rights, goals, notes, reference links;
  • source / attribution parameters (for example UTM or referrer) when captured;
  • replies, messages, and notes on the inquiry thread;
  • status and tracking-token information so the brand can follow the inquiry;
  • operational email delivery records related to that inquiry;
  • lead-quality / spam signals used to help the creator triage (not a guarantee of brand legitimacy).

5. Public My Page vs private workspace

Published My Page intentionally exposes only public profile and media-kit style fields the product is designed to show (for example account name, niche, bio, avatar, packages, pricing signals, social proof, availability, and related public content). Unpublished or paused pages do not accept new briefs; visitors see the existing coming-soon style behaviour.

Private workspace data — Inbox, Deals, quotes, negotiation history, Collections entries, Earnings internals, billing, Pro/grant fields, user identity fields, notification preferences, domain trust/block lists, and similar commercial records — is not part of the public My Page.

Anyone with an inquiry status tracking link can view that inquiry’s status surface. Treat the link as secret.

6. Collections (creator-recorded)

Collections information is entered and maintained by the creator. Sponeach does not independently verify bank deposits, collect campaign fees from brands, hold funds, or act as escrow. A “paid” Collections entry means the creator recorded that status — not that Sponeach confirmed a transfer.

7. Creator Pro decision support

Optional Creator Pro features (Quote Intelligence, Personal Deal Economics Memory, Negotiation Path Memory, Follow-through Assist, Collections Clarity, Commercial Insights) are rules-based / data-driven decision support built from your workspace history. They are not marketed as generative model pricing, external market-rate databases, or guaranteed optimisation. Recommendations are advisory; you decide what to quote, send, accept, reject, follow up on, or record. Suggested follow-up copy is not automatically sent.

8. System, security, and operational data

  • authentication and session information (including cookies described below);
  • Cloudflare Turnstile signals when configured on public inquiry forms;
  • error/diagnostic data when Sentry is configured for the deployment;
  • performance telemetry from Vercel Speed Insights;
  • transactional email delivery records (recipient, subject, status, provider message id);
  • billing webhook / billing-event audit information for Creator Pro.

9. Why we process data

  • create and secure accounts;
  • operate My Page, inquiries, conversations, quotes, Deals, Earnings, and related workspace features;
  • send transactional email (new brief, quote, status, replies, auth messages);
  • provide optional Creator Pro decision support from your own history;
  • bill Creator Pro via Razorpay and keep entitlement accurate;
  • prevent spam and abuse;
  • understand product reliability and usage;
  • comply with law and payment-provider requirements when applicable.

We do not sell personal data. We do not operate a cross-creator rate marketplace.

10. Third-party services we actually use

These providers support infrastructure. They are not each described here as a legal “Data Processor” conclusion for every regime, and they do not each receive every category of data:

  • Supabase — authentication, database, and storage (including avatars);
  • Vercel — application hosting; Speed Insights for performance telemetry;
  • Resend — transactional email (and optional inbound email when configured);
  • Razorpay — Creator Pro checkout and subscription billing;
  • Cloudflare Turnstile — bot checks on public inquiry forms when configured;
  • Google — optional OAuth sign-in;
  • Sentry — optional error monitoring when a DSN is configured for the deployment.

Avatar files are stored so they can be shown on My Page when you publish one.

11. Cookies, local storage, and similar technologies

We do not operate a third-party advertising cookie graph. We do use functional storage, including:

  • Supabase Auth session cookies to keep you signed in;
  • a remember-me cookie when you choose a longer session;
  • inquiry status token cookie and browser local storage so a brand can continue / track a brief after submit;
  • session storage for draft inquiry forms, attribution, onboarding, and related UX;
  • local storage for theme preference (`sponeach-theme`) and light first-inquiry coaching flags.

This product does not currently ship a cookie-consent banner solely because functional storage exists. Disclosure here is intentional.

12. Retention and deletion

Account and deal data are kept while the account exists. Automated long-term purge schedules for analytics or email logs are not productized as a customer self-serve control.

Creators can delete their account in Dashboard → Security. If a paid Razorpay subscription is active or canceling, Sponeach attempts to cancel that subscription with the provider before deleting the account. If provider cancellation fails, deletion stops and the account remains so you can retry.

After a successful deletion, related workspace rows cascade where the database design requires it. Some operational records may remain where foreign keys are cleared but emails or subjects are retained (for example certain email delivery logs), and shared brand directory records are not exclusively owned by one creator. Copies held by infrastructure or payment providers may persist according to those systems. We do not promise instant erasure from every third-party system.

Brand contacts do not have Sponeach accounts. To request correction or erasure related to a brief you submitted, contact us with enough detail to locate the inquiry.

13. Children

Sponeach is intended for creator business use. We do not knowingly target children. The operator’s published minimum age is an owner decision and will appear here when confirmed.

14. Changes

We may update this notice. The “last updated” line will change. Material changes should be announced in-product or by email when practicable.

15. Contact

Privacy and support questions:

Email founder.sponeach@gmail.com or use our Contact page.

If a separate privacy or grievance mailbox is designated later by the operator, it will be published here. Until then, use the Contact path above.