Privacy Policy

Introduction

Sponserd, LLC ("Sponserd", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the SponserdIQ platform or any related services. It is designed to meet the requirements of global data protection laws in the jurisdictions where our customers and partners may operate, including the United States, the United Kingdom, the European Union (EEA), Canada (including Québec), and Mexico. By using SponserdIQ, you agree to the practices described in this Policy. If you do not agree, please discontinue use of our platform.

Scope. This Policy applies to personal data collected from users of the SponserdIQ platform and services. It covers how we handle personal information under laws such as the EU General Data Protection Regulation (GDPR) and UK GDPR, the California Consumer Privacy Act as amended by the CPRA (collectively "CCPA"), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's Law 25, and Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). We do not cover any services or websites that are not operated by Sponserd, even if linked from our platform.

Information We Collect

We collect personal information (also referred to as personal data) that you provide to us, that is collected automatically through your use of our services, or obtained from third parties. The types of data we collect include:

• Account and Contact Information: When you register or use SponserdIQ, you may provide personal identifiers such as your name, email address, telephone number, username, password, and other contact details. This also includes any profile information or preferences you choose to add to your account.
• Transactional and Payment Data: We collect payment information such as credit/debit card numbers or payment service details and transaction history. We rely on Stripe as our payment processor and do not store your financial account numbers on our systems.
• User Content and Communications: We collect any content you upload, post, query, or generate on the platform, such as profile information, search queries, chat prompts, exports, comments, messages, or feedback. This includes communications you send to us (like support inquiries).
• Device and Usage Information: We automatically collect certain data about your device and how you interact with SponserdIQ. This includes technical information like your IP address, device identifiers, browser type, operating system, and platform. We also collect usage data such as the pages or screens you view, features you use, access times, and referring websites.
• Cookies and Tracking Technologies: Like most online services, SponserdIQ uses cookies, web beacons, and similar tracking technologies to personalize your experience and analyze usage of our platform.
• Information from Third Parties: We may receive personal data about you from other sources. For example, if you link or sign in to SponserdIQ through a third-party account (such as Google, or other SSO), we will receive information like your name or email from those services as permitted by their terms.

We do not collect any sensitive categories of personal data about you or your business (for instance, we do not ask for social security numbers, government IDs, or precise geolocation). In the event we ever need to handle sensitive personal information, we will do so in compliance with applicable requirements, including obtaining your explicit consent where required by law.

How We Use Your Information

We use personal information for the following purposes, in accordance with applicable laws and only as necessary for those purposes:

• To Provide and Operate the Service: create and maintain your account, authenticate you when you log in, enable core platform features, and monitor technical functioning.
• To Communicate with You: service-related communications such as confirmations, important announcements, customer support messages, and updates to terms or policies. We may also send marketing communications about new features or promotions, in accordance with your preferences and applicable law. You can opt out of marketing messages at any time.
• To Personalize Content and Improve User Experience: remember your preferences, tailor the content you see, and analyze usage to improve the platform.
• For Advertising and Analytics Purposes: where permitted, we may use information about you to show you targeted promotions or sponsored messages that we believe may interest you. We do not use sensitive personal information for targeted advertising without consent.
• To Ensure Security and Prevent Fraud: detect, investigate, and prevent fraudulent transactions, spam, abuse, security incidents, and other malicious or illegal activities on the platform.
• To Comply with Legal Obligations: fulfill legal and regulatory obligations, respond to valid government requests, and exercise or defend legal claims.
• For Any Other Purpose With Your Consent: we will explain new uses at the time of collection and obtain your consent if required.

Legal Bases for Processing (EEA/UK visitors). If you are in the European Economic Area or United Kingdom, we only process your personal data when we have a valid legal basis to do so under GDPR/UK GDPR. The legal bases we rely on are typically: (i) Performance of a contract; (ii) Consent; (iii) Legitimate interests; and (iv) Compliance with laws. If you have questions about the specific legal basis for any processing of your data, please contact us at the details provided below.

How We Share and Disclose Information

We do not sell your personal information to data brokers or third parties for monetary compensation. We only share your information in the following circumstances, and always with appropriate safeguards and only to the extent necessary:

• Service Providers (Processors): trusted third-party vendors who perform services on our behalf — including hosting, payment processing (Stripe), email delivery, customer support, analytics, AI model providers, and security services. These providers are contractually bound to handle personal information only for the purposes we specify.
• Analytics Partners: we may allow third-party analytics companies to collect information about your device and online activities through cookies and similar tools. We do not permit third parties to use this data for their own independent marketing.
• Affiliates: we may share your information with our corporate affiliates (entities that are under common ownership or control with Sponserd) for purposes consistent with this Policy.
• Business Transfers: in the event of a merger, acquisition, financing, restructuring, bankruptcy, or sale of company assets, personal information held by us may be disclosed to or transferred to the other organization(s) as part of that transaction.
• Legal Compliance and Protection: we may disclose personal information to third parties if we believe in good faith that disclosure is necessary to comply with applicable law, enforce our Terms of Service, address fraud or security issues, or protect the rights, property, or safety of Sponserd, our users, or the public.
• With Your Consent or At Your Direction: apart from the situations above, we will share your personal information with others only if you have provided consent or explicitly directed us to do so.

No Selling of Personal Data. We do not sell your personal information in the traditional sense of exchanging it for money. If our practices change, we will implement appropriate opt-out mechanisms and prominently inform you, including honoring "Do Not Sell or Share My Personal Information" requests.

Cookies and Tracking Choices

SponserdIQ uses cookies and similar tracking technologies to provide and optimize our services. These may be session cookies (which expire when you close your browser) or persistent cookies. We use these for purposes such as keeping you logged in, remembering your settings and preferences, understanding how users navigate through our content, authenticating your requests, and personalizing content.

Your Choices. Most web browsers automatically accept cookies, but you can typically modify your browser setting to decline cookies or alert you when a cookie is being placed. If you disable or delete cookies, some features of our service may not function properly.

Cookie Consent (EEA/UK). If you are in the European Union, United Kingdom, or other jurisdictions that require it, we will display a cookie consent banner allowing you to accept or reject non-essential cookies.

Do Not Track / Global Privacy Control. SponserdIQ does not respond to DNT browser signals. However, we treat Global Privacy Control (GPC) signals as a valid opt-out request.

International Data Transfers

SponserdIQ is a global platform. Your personal information may be stored and processed in countries other than your own, including the United States. We implement appropriate safeguards in accordance with applicable data protection laws — including Standard Contractual Clauses (SCCs), the UK's International Data Transfer Agreement, adequacy decisions, and explicit consent where required.

Data Security

We implement a variety of technical and organizational security measures to safeguard your personal information, including:

• Encryption: HTTPS/TLS for data in transit; encryption for sensitive data at rest.
• Access Controls: we limit access to personal data to employees, contractors, and agents who need such access; two-factor authentication on internal systems.
• Monitoring and Testing: regular security assessments, software patching, and incident-response procedures.
• Vendor Due Diligence: we vet third-party service providers and require contractual data-protection commitments.

While we strive to protect your information, no security measure is 100% perfect. You should also take steps to protect your account, such as choosing a strong password and keeping it confidential. If you suspect any unauthorized access, please notify us immediately.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Account Data: retained for as long as your account is active. Upon deletion or extended inactivity, we initiate deletion or anonymization within a reasonable period.
• Content: queries, prompts, and content you submit may be retained in aggregated/anonymized form for analytics; raw user-identifiable content is removed or disassociated upon account deletion.
• Transactional Records: retained for longer periods (typically 7 years) as required by law for tax, audit, anti-fraud, or accounting purposes.
• Legal Hold: retained for the duration of any litigation hold or contractual obligation.
• Backups: may persist in backup or archival systems until those systems are overwritten or refreshed; access is limited and they are securely managed.

Your Privacy Rights and Choices (By Jurisdiction)

Depending on where you reside, you may have certain rights under privacy laws to access, control, or limit the use of your personal information. To make any request regarding your personal data, contact us at privacy@sponserd.com. We will verify your identity before fulfilling a request and respond within the timeframes required by law.

European Economic Area (EEA) and United Kingdom

Under GDPR/UK GDPR you have the right to: (a) access your data; (b) rectify inaccurate or incomplete information; (c) erase your data ("right to be forgotten"); (d) restrict processing; (e) data portability; (f) object to processing including direct marketing; (g) not be subject to solely automated decisions; (h) withdraw consent; and (i) lodge a complaint with a Supervisory Authority. We will respond to verified requests within one month, or notify you if an extension is permitted.

United States (California and Other States)

If you are a resident of California (or other states with similar laws including Colorado, Connecticut, Utah, and Virginia), you may have the right to: (a) know/access categories of personal information we collect; (b) delete personal information; (c) correct inaccurate information; (d) opt out of "sale" or "sharing" of personal information; (e) limit the use of sensitive personal information (California); and (f) non-discrimination for exercising these rights. We honor the Global Privacy Control (GPC) signal as a valid opt-out request.

Canada (PIPEDA and Québec Law 25)

Under Canadian federal and provincial privacy law, you have the right to: access your personal information; request correction; withdraw consent (subject to legal or contractual restrictions); be informed of our practices; and challenge our compliance via the Office of the Privacy Commissioner of Canada or provincial regulators. Québec residents have additional rights under Law 25, including data portability and a right to be informed about automated decision-making.

Mexico

Under Mexico's LFPDPPP you have ARCO rights — Access, Rectification, Cancellation, and Opposition — plus data portability. To exercise these rights, send us a request at privacy@sponserd.com with the subject "Mexico ARCO Request" and the required identification and details. We will respond within the timeframes established by law.

Authorized Representatives and Minors. If you wish to use an authorized agent (such as a legal representative) to exercise your rights in any jurisdiction, we may require proof of authorization and verification of the agent's identity.

Children's Privacy

SponserdIQ's services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 years old. If we learn that we have inadvertently collected personal information from a child under 13 without proper consent, we will take steps to delete that information promptly.

In certain jurisdictions (such as the EU and UK), if a child is under 16, consent for processing personal data in the context of online services may need to come from the parent or guardian. SponserdIQ does not currently offer services to children under 16 without parental consent. Québec's Law 25 similarly requires parental authorization for collecting personal information from minors under 14.

Updates to this Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will update the "Last Updated" date at the top of this Policy. If the changes are significant, we will provide a more prominent notice — for example, by posting a notice on our website's homepage or sending an email notification.

By continuing to use SponserdIQ after any updates come into effect, you agree to the revised Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: privacy@sponserd.com

Mailing Address: Privacy Officer — Sponserd, LLC
651 Broad Street, Suite 201
Middletown, DE 19709, USA

Our Data Protection Officer (for GDPR/UK GDPR purposes) and Privacy Officer (for Canadian and other purposes) can be reached at the above email or mailing address. They are responsible for overseeing our compliance with this Policy and data protection laws.

Thank you for trusting SponserdIQ with your personal information. We value your privacy and are dedicated to safeguarding it in all aspects of our business.