Privacy Policy
Effective date: March 2026
What is SponsorCal
SponsorCal (sponsorcal.com) provides booking, payment, and asset collection infrastructure for newsletter sponsorships.
SponsorCal is the data controller for personal data processed through sponsorcal.com.
Contact: hello@sponsorcal.com
Data we collect
Creator accounts:
- Email address and password (stored as a bcrypt hash — we cannot read your password)
- Newsletter name, URL slug, bio, and public profile information you provide
- Publishing schedule and slot configuration you set up
- Stripe Connect account ID (linked when you connect your payout account)
Sponsor bookings (collected at checkout):
- Sponsor name and email address
Ad content (submitted during asset submission):
- Company name, ad headline, body copy, and destination URL
- Ad logo (stored in Vercel Blob with a 12-month expiry)
Payment metadata:
- Payment amounts (gross, platform fee, net payout), transaction reference IDs, and currency
What we do not collect
We do not store credit or debit card numbers, CVV codes, or bank account details. Payment data is processed directly by Stripe. We access limited payment metadata required to operate the service — specifically: payment amounts, transaction reference IDs, and booking identifiers.
How we use your data
Data is used only to operate the service:
- Creator account data — to authenticate you and power your booking page
- Sponsor data — to process payments, send confirmation emails, and enable asset submission
- Payment records — retained for accounting and tax purposes
We do not sell your data or share it with advertisers.
Lawful basis for processing
We process personal data on the following bases:
- Contract — to provide the booking and payment infrastructure you have signed up to use
- Legal obligation — to retain financial records for accounting and tax compliance
- Legitimate interests — to operate, secure, and improve the service
Third-party services
| Provider | Purpose |
|---|---|
| Stripe | Payment processing and creator payouts (Stripe Connect) |
| Resend | Transactional email (confirmations, reminders, dispute alerts) |
| Vercel | Application hosting and serverless infrastructure |
| Neon | PostgreSQL database |
| Vercel Blob | File storage for ad logos |
| PostHog | Product analytics (page views, feature usage — no sensitive financial data) |
| Upstash | Rate limiting |
Each provider operates under their own privacy policy.
Data retention
Sponsor name and email address are automatically deleted 12 months after the sponsorship date. Ad logo files expire and are automatically removed from Vercel Blob 12 months after upload. Ad copy content and company name are retained as part of the booking record. Financial transaction records (amounts, payment reference IDs) are retained for 7 years for accounting compliance.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate data
- Erasure of your data where we no longer have a lawful basis to hold it
- Restriction of our processing of your data in certain circumstances
- Data portability — to receive your data in a machine-readable format
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact hello@sponsorcal.com. We will respond within 30 days.
Cookies
We use essential session cookies for authentication. We do not use tracking cookies for advertising.
Changes
We may update this policy. Material changes will be communicated by email to registered creators.