Effective Date: May 2025  | Version 2.0

 1. WHO WE ARE AND WHAT THIS POLICY COVERS

SponsorLink is a sponsorship management platform based in
Australia. We build tools that help athletes and content creators find, manage, and fulfil commercial sponsorship arrangements with brands. 

This policy covers how we handle your personal information, what we collect, why we collect it, who we share it with, and what rights you have over it. We've written it to be straightforward, not to bury things in legal language. 

If something here isn't clear, reach us directly at privacy@sponsorlink.co. 

2. INFORMATION WE COLLECT

2.1 What you give us directly

When you create an account, we ask for the basics: your name, email address, and a password. If you're setting up a public profile, you can add things like a bio, sport or content category, and a profile photo, that'syour call. 

If you engage in a paid sponsorship through the platform, we'll also need payment and billing details, which our payment provider handles on our behalf. 

2.2 Social platform data, only when you connect an account

SponsorLink can connect to social platforms including Facebook and Instagram. This only happens when you choose to link an account. We don't
pull anything from those platforms without you going through the authorisation process yourself. 

When you do connect an account, we access a limited set of data tied to your own profile: 

-  Your public profile details (name, profile picture, bio)

-  Your follower or subscriber count

-  Engagement figures on posts you've published (likes, comments, shares, views)

-  Aggregated audience summary data, as provided directly by the platform's API 

We don't access your messages, your contact list, your friends, or anything beyond what you've explicitly approved. You can disconnect any linked account at any time, and we'll stop pulling data from it immediately. 

2.3 Standard platform usage data

Like most apps, we collect basic technical information when you use SponsorLink, things like when you logged in, what device you're using,
which features you accessed, and error reports if something breaks. This helps
us keep the platform running properly. 

3. HOW WE USE YOUR INFORMATION

3.1 Running the platform

Most of what we collect is needed to do the basics: create your account, manage your profile, handle the workflow when you're negotiating or running a sponsorship deal, track deliverables, send you notifications when something needs attention, and process payments. 

3.2 Performance insights, for you

If you've connected a social account, we use that data to show you performance metrics inside your SponsorLink dashboard. This might include
your engagement rate, how your audience has changed over time, or how a particular campaign is tracking. 

Those insights are yours. If you're in an active sponsorship deal and the agreement covers performance reporting, we'll share relevant metrics with that sponsor, but only within the scope of what you've agreed to, and only for the duration of that deal. 

3.3 What we don't do

Some things are worth being direct about: 

-  We don't sell your personal information. Not to advertisers, not to data brokers, not to anyone.

-  We don't allow brands to monitor your social activity outside the terms of an active sponsorship agreement you've entered into.

-  We don't retain your media content beyond what's needed to handle your active deliverables.

-  We don't use your content or personal data to train machine learning models or AI systems of any kind.

-  We don't share your analytics or performance data with parties outside your current deals.

 -  We don't publish or redistribute your metrics anywhere publicly. 

4. WHO WE SHARE YOUR INFORMATION WITH

4.1 Sponsors, within active deals only

When you're in a live sponsorship agreement, the brand on the other side of that deal will have access to certain information relevant to the partnership. That typically means your agreed profile details, deliverables you've submitted through the platform, and any performance reports tied to that specific campaign. 

Once a deal closes, that brand's access to your data ends. They don't retain ongoing visibility into your profile or metrics after the agreement wraps up. 

4.2 Suppliers and service providers

We work with third-party companies to run parts of our infrastructure, cloud hosting, payment processing, email delivery, and basic platform analytics. These providers only process your data on our behalf, under contracts that require them to handle it appropriately. They can't use your data for their own purposes. 

4.3 Legal obligations

There are situations where we may be required by law to disclose certain information, court orders, regulatory requirements, that kind of thing. We'll only do this where we're genuinely obligated to, and where legally possible, we'll let you know. 

5. YOUR CONTROLS AND RIGHTS

You're not locked in. Here's what you can do:

 5.1 Social account connections

You decide when to connect a social account and you can disconnect it whenever you like, through Settings > Connected Accounts. Once you disconnect, we stop pulling new data straight away. Any stored metrics from
that account are deleted within 30 days. 

5.2 Your profile

You can update or correct your profile details at any time. You also control how visible your profile is, you can limit what browsing brands see versus what active sponsors can access. 

5.3 Leaving a deal

If a sponsorship isn't working out, you can exit it through the platform dashboard. The specific terms of any exit will depend on what's in your deal agreement, but your ability to do this is built into the platform. 

5.4 Deleting your account

If you want to close your SponsorLink account entirely, you can do that through Settings > Account > Delete Account, or by emailing privacy@sponsorlink.com.au. 

When we receive a deletion request, we'll deactivate your profile right away and remove it from any brand-facing discovery. Your personal data gets deleted within 30 days. We do hold onto financial and contractual records for seven years, as Australian law requires, but those sit in secure, restricted storage and aren't used for anything else. 

5.5 Access, correction, and portability

You have the right to ask us what personal data we hold about you, to correct anything that's wrong, and to receive your data in a portable format if you want it. To make any of these requests, email privacy@sponsorlink.com.au. We'll come back to you within 30 days. 

6. HOW LONG WE KEEP YOUR DATA

We don't hold onto things longer than we need to. Here's the general picture: 

Social media metrics (from connected platforms)

Kept while your account is connected. Deleted within 30 days of disconnection. 

Sponsorship deliverables (content files you submit)

Kept for the duration of your deal, plus a 90-day close-out window. Deleted after that. 

Deal communications and records

Kept for the deal period plus 12 months, in case of any disputes. 

Your account profile

Kept until you request deletion. Removed within 30 days of that request. 

Financial and billing records

Kept for seven years under Australian tax law. Held securely and not used for other purposes. 

Platform usage logs

Kept on a rolling 90-day basis, for security and debugging purposes only. 

7. SECURITY

We take reasonable precautions to protect your data. Data moving between your device and our servers is encrypted in transit (TLS 1.2 or higher). Social platform access tokens are encrypted at rest using AES-256 and stored separately from your profile data. Access to personal data within our team is restricted to people who have a genuine reason to need it. 

If there's ever a security incident that affects your information, we'll notify you in line with our obligations under the Australian Privacy Act. 

That said, no system is completely bulletproof. If you think something's wrong with your account, contact us at security@sponsorlink.com.au.

8. META PLATFORM DATA, SPECIFIC COMMITMENTS

SponsorLink integrates with Facebook and Instagram under Meta's Platform Terms and Developer Policies. Our specific commitments around Meta data: 

-  We access Meta platform data only after you've gone through Meta's standard OAuth authorisation process. There's no back-door access.

-  We request only the permissions needed for the features you're actively using.

-  Meta platform data is used solely within your SponsorLink session and active sponsorship workflows. It doesn't go anywhere else.

    -  We don't pass Meta data to advertising
networks, data brokers, or analytics aggregators.

-  We don't use Meta platform data to build profiles beyond what SponsorLink needs to operate.

-  We don't use Meta platform data to surveil, monitor, or track anyone, not outside the terms of an agreed deal.

-  You can revoke SponsorLink's access to your Facebook or Instagram account at any time through your account settings on those platforms, under Apps and Websites.

-  After you revoke access, we delete any Meta platform data we hold within 30 days. 

9. COOKIES

SponsorLink uses a small number of cookies, all necessary for the platform to work: 

-  Session cookies, to keep you logged in

-  Security cookies, to protect against certain types of attacks

-  Preference cookies, to remember settings you've chosen in the app 

We don't use advertising cookies or track you across other websites. If you block cookies through your browser settings, it may affect your ability to log in. 

10. MINIMUM AGE

SponsorLink is for people 18 and over. We don't knowingly collect information from minors. If a minor has created an account, please let us know at privacy@sponsorlink.com.au and we'll remove it promptly. 

11. CHANGES TO THIS POLICY

If we make changes to this policy, we'll post the updated version here with a new effective date. For anything material, changes that genuinely affect your rights or how we handle your data, we'll send a notification through the app and by email, and give you at least 14 days before those changes take effect. 

Staying on SponsorLink after that date means you're ok with the update. If you're not, you can delete your account. 

12. CONTACT

For any privacy questions, requests, or concerns: 

Email: privacy@sponsorlink.co

Response: We aim to respond within 5 business days. 

If you're not satisfied with how we've handled something, you can escalate to the Office of the Australian Information Commissioner at www.oaic.gov.au. 

SponsorLink Pty Ltd  |  privacy@sponsorlink.co  | Version 2.0, May 2025