SponsorHound Privacy Policy
Last updated: [DATE]
This policy explains what personal information SponsorHound ("we", "us") collects, why, and what you can do about it. SponsorHound is operated by [LEGAL ENTITY NAME], [POSTAL ADDRESS]. Questions go to [email protected].
1. Information about our users
Account
Your email address, your account status and plan, and when the account was created. If you sign in with a password, our sign-in provider stores only a salted hash of it. If you use "Continue with Google", Google tells us your email address, name and profile picture URL, and that Google has verified the email; we use only the email to identify your account.
API keys
We store a one-way hash of each key, never the key itself, plus its first 13 characters (to show you which key is which), its name, status and when it was created, last used, rotated or revoked.
Usage
Counts of tool calls per day, per month and per tool, to apply your plan's limits and show you your usage.
Request logs
For each call to the MCP server: your key's prefix (never the key), the tool, its arguments (free text cut to 300 characters), the IDs returned, the response status and the latency. Our infrastructure providers also log IP addresses and request metadata for security and abuse prevention.
Billing
If you choose a paid plan, Stripe collects your payment details. We receive and keep your Stripe customer and subscription IDs, plan, status and billing period; we never see your full card number.
Messages
What you send us by email (feedback, support and removal requests).
2. How we use it
- To provide the service: sign-in, keys, limits, billing and support (performance of our contract with you).
- To keep it secure and prevent abuse (legitimate interests).
- To improve results, for example by reviewing which answers were wrong (legitimate interests). Request logs are kept only 14 days.
- To send service emails such as email confirmation, password resets and important changes. We don't send marketing email without your consent.
- To meet legal obligations, such as tax records for payments.
We don't sell or rent personal information, we don't share it for cross-context behavioural advertising, and we don't use it to train third-party AI models.
3. Cookies and tracking
sponsorhound.com uses no cookies, analytics or tracking scripts. The dashboard at app.sponsorhound.com stores your sign-in session in your browser's local storage, which is needed for it to work. Our hosting provider (Cloudflare) may process technical data to deliver and protect the sites.
4. Information in the SponsorHound catalog
The catalog is built from public podcast and newsletter RSS feeds that allow automated access. It contains show and brand names, publisher names as given in the feed, episode titles and dates, links, and short quotes (at most 240 characters) from sponsor reads. Some of this can relate to identifiable people, such as a host named in a show title. We process it on the basis of our legitimate interest in helping creators find sponsors from public information, and we keep it minimal: no contact details, audience data or YouTube data. Anyone can ask us to remove their show, brand or a quote: see opt-out and removal.
5. Service providers
We use these providers to run SponsorHound. They process data for us under their own terms and security commitments:
| Provider | What for |
|---|---|
| Supabase | Database and sign-in (accounts, keys, usage, catalog) |
| Amazon Web Services | MCP server, request logs, data collection, backups, text embeddings, sending account emails (Amazon SES) |
| Cloudflare | Website hosting, DNS, the request proxy for mcp.sponsorhound.com, email forwarding |
| Stripe | Payments, when paid plans are offered |
| "Continue with Google" sign-in, if you choose it |
We may also disclose information if the law requires it, to protect our rights or users' safety, or as part of a merger or sale of the business (with notice to you).
6. Where it's stored
Our servers are in the United States (Oregon). If you're outside the US, your information is transferred there. [Where required, we rely on the EU Standard Contractual Clauses offered by our providers.]
7. How long we keep it
- Request logs: 14 days.
- Account, keys and usage counts: while your account is open. When you ask us to delete your account we delete it within 30 days; encrypted backups roll off within a further 35 days.
- Billing records: as long as tax law requires (often 7 years).
- Emails with us: up to 2 years, unless a longer period is needed for a legal claim.
8. Your rights
Depending on where you live (for example the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. Email [email protected]; we'll answer within 30 days and won't treat you differently for asking. You can also complain to your local data protection authority.
9. Security
Traffic is encrypted with TLS. API keys are stored only as hashes, database access is limited by role and row-level security, and access to production systems is limited to the people who run the service. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
10. Children
SponsorHound is for professionals and isn't directed at children under 16. We don't knowingly collect their information.
11. Changes
We'll post changes here and update the date above. For material changes we'll also email account holders before they take effect.