Privacy Policy

To provide your account, we store your name, email address, and (optionally) your profile picture. If you sign up with email and password, we store a one-way password hash — never your password itself.

We also store the business data you create: sponsorship deals, contracts, deliverables, and payment information. You can optionally add a business name and VAT number, which appear on the invoices you generate. This data is yours, and is processed only to run the service.

When a deal or contract involves a brand (sponsor), we store the sponsor company name and the contact person name that you record. When a brand representative signs a contract, we also store their name, title, and the date they signed as an audit record.

This data is processed on the basis of legitimate interest and performance of the sponsorship agreement — not consent. It is kept with the associated deal and contract, and removed when you delete them or your account. The sponsor can ask us to access, correct, or delete their own details.

If you contact a creator through our relay form, we process the email address you provide only to forward your message to that creator. It is not stored.

We process your personal data on the basis of consent (which you give when you create your account) and legitimate interest (providing and securing the service you asked for). You can withdraw consent at any time by deleting your account.

We may email you about upcoming deliverable deadlines and overdue payments. These reminders are transactional, on the basis of performing the service you asked for, and can be turned off in Settings.

We keep your data for as long as your account is active. When you delete your account, your personal data and business data are permanently removed (unless we are required by law to retain specific records).

Under the UK and EU GDPR, you have the right to:

• Access and portability — download your data from Settings.
• Rectification — correct inaccurate data.
• Erasure — delete your account and all its data from Settings.
• Withdraw consent — at any time.

We share only what is necessary with Stripe to process payments,Resend to deliver transactional emails (such as reminders and password resets), and with your identity provider (e.g. Google) when you sign in through them. We do not sell your personal data.

To exercise any of these rights or ask a question, use the tools in your account Settings, or contact us at the address listed on our website.