Privacy Policy

1. Information We Collect

We collect information you provide directly to us, as well as data generated automatically when using the service:

• Account Data: Your email address, username, and hashed password.
• Billing Information: We do not store full credit card details. All transactions are processed by our Merchant of Record — Lemon Squeezy. We only store Subscription IDs and payment statuses to grant access to the service.
• Usage Data: Your search history, URLs of videos you analyze, and analysis results (sponsor integrations).
• Technical Data: IP address, browser type, and session data to ensure security and app functionality.

2. How We Use Your Information

• To provide, maintain, and improve SponsorSpy features (video analysis, sponsor tracking).
• To manage your account, subscriptions, and limits (credits).
• To send transactional emails (e.g., email confirmation, password resets, low balance alerts).
• To protect against fraud, abuse, and ensure platform security.

3. Third-Party Services and Data Sharing

We do not sell your personal data. However, to operate the service, we use trusted partners:

• Artificial Intelligence (AI): We send video transcripts to external AI providers to find sponsor integrations. Your personal data (email, name) is never sent to AI models or used to train them.
• YouTube API: We use public YouTube data (Video API) to retrieve video titles and transcripts.
• Lemon Squeezy: Our Merchant of Record, acting as the controller of your payment data.
• Resend: Email provider used for delivering system notifications.
• Cloudflare: Provides network security, DDoS protection, and traffic routing.

4. Cookies

SponsorSpy uses only strictly necessary cookies. We use them exclusively to maintain your session (so you stay logged in) and protect against CSRF attacks. We do not use third-party trackers for ad retargeting on our site.

5. Data Storage and Security

We take reasonable measures to protect your information. Your passwords are securely hashed (bcrypt). Data exchange between your browser and our servers occurs over an encrypted connection (HTTPS). Data is stored on servers in secure data centers.

6. Your Rights (GDPR / CCPA)

Depending on your location, you have the right to:

• Access the personal data we hold about you.
• Request the correction of inaccurate data.
• Request the deletion of your account and associated personal data (Right to be forgotten).
• Export your analysis history and profile data.

To exercise these rights, you can use the settings in your profile or contact us directly.

7. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: