Privacy Policy

1. Overview

This Privacy Policy explains how Sponbar ("we", "us") collects, uses and shares personal data when you use our website, applications and services (the "Services"). It applies to advertisers, creators and visitors.

2. Data we collect

• Account data: name, email address, password (stored hashed), role and profile details.
• Channel data (creators): when you connect your YouTube channel, we access and store channel information (such as channel ID, title, thumbnail and subscriber count) and video information (such as titles, thumbnails, views, likes, comments and duration) through the YouTube API Services.
• Campaign data: campaigns, sponsored videos, ad creatives, budgets and performance metrics.
• Payment data: handled by our payment provider. We receive identifiers and payout status, not full card numbers.
• Usage data: pages visited, actions taken, device and browser information, and IP address.
• Local storage and cookies: preferences such as interface state and session handling, as described in our Cookies Policy.

3. How we use data

We use personal data to provide and operate the Services, match advertisers and creators, process payments, measure campaign performance, communicate with you, prevent fraud and abuse, comply with legal obligations and improve the Services.

4. Legal bases

Where required by law (for example in the EEA or the UK), we process personal data based on: the performance of a contract (providing the Services), our legitimate interests (improving and securing the Services), your consent (where required, such as for certain cookies) and compliance with legal obligations.

5. YouTube API Services

Our Services use YouTube API Services. By using Sponbar, you agree to be bound by the YouTube Terms of Service. Our use of data received from YouTube API Services is also subject to the Google Privacy Policy.

We store channel and video data only to provide features such as channel discovery, campaign tracking and analytics, and we refresh or delete it when it is no longer needed. You can revoke Sponbar's access to your Google account at any time through the Google security settings page. Revoking access disconnects the channel and stops further data collection.

6. How we share data

• Service providers: hosting, analytics, payment processing (including Stripe) and YouTube API Services.
• Between users: advertisers see aggregated or channel-level information needed to evaluate sponsorships; creators see the advertiser's campaign and ad content.
• Legal: when required by law or to protect the rights and safety of Sponbar, our users or others.
• Business transfers: in connection with a merger, acquisition or sale of assets.

We do not sell personal data.

7. International transfers

Personal data may be processed in countries outside your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses approved by relevant authorities.

8. Retention

We keep personal data for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes and enforce agreements. Channel data is deleted or anonymized when you disconnect the channel or close your account, unless retention is required by law.

9. Security

We use technical and organizational measures, including encryption in transit, access controls and hashed passwords, to protect personal data. No method of transmission or storage is completely secure.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive a portable copy, and to withdraw consent at any time. California residents have rights under the CCPA/CPRA, including the right to know, the right to delete and the right not to be discriminated against for exercising those rights.

To exercise your rights, contact us at contact@sponbar.com. You may also lodge a complaint with your local data protection authority.

11. Children

The Services are not directed to children under 18 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal data. If we learn that we have collected such data, we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide notice through the Services or by email.

13. Contact

If you have questions about this Privacy Policy or our data practices, contact us at contact@sponbar.com.