Privacy Policy

1. Who we are

SponsorTank (“we”, “us”, “our”) is a platform that connects grassroots sports clubs with sponsors. We are based in Ireland and are subject to the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at: privacy@sponsortank.com

2. What data we collect

We collect the following personal data when you register or use SponsorTank:

• Account data: name, email address, password (hashed), and account type (club or sponsor).
• Profile data: club name or company name, sport type, location, sponsorship assets, and contact details you choose to provide.
• Usage data: pages visited, features used, and interaction data collected via cookies and analytics tools.
• Communications: enquiries and messages sent through the platform.

If you sign up via Google OAuth, we receive your name and email address from Google. We do not receive your Google password.

3. Why we collect your data (legal basis)

We process your data on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): to provide you with the SponsorTank service you signed up for.
• Legitimate interests (Art. 6(1)(f)): to improve the platform, prevent fraud, and ensure security.
• Consent (Art. 6(1)(a)): for non-essential cookies and marketing communications (where you have opted in).
• Legal obligation (Art. 6(1)(c)): to comply with applicable laws and regulations.

4. How we use your data

• Create and manage your account.
• Match clubs with relevant sponsors.
• Facilitate enquiries and communications between clubs and sponsors.
• Send transactional emails (account confirmation, password reset).
• Improve and develop the platform.
• Comply with legal obligations.

5. Who we share your data with

We do not sell your personal data. We share data only with:

• Supabase: our database and authentication provider (data stored in EU-West region).
• Vercel: our hosting provider.
• Google: if you use Google OAuth log-in.

All third-party processors are contractually bound to process data only on our instructions and in compliance with GDPR.

6. How long we keep your data

• Account data is retained for as long as your account is active.
• If you delete your account, we delete your personal data within 30 days, except where retention is required by law.
• Anonymised usage statistics may be retained indefinitely.

7. Your rights under GDPR

You have the following rights:

• Right of access: request a copy of your personal data.
• Right to rectification: correct inaccurate data.
• Right to erasure: request deletion of your data (“right to be forgotten”).
• Right to restriction: limit how we process your data.
• Right to portability: receive your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email privacy@sponsortank.com. We will respond within 30 days. You also have the right to lodge a complaint with the Data Protection Commission (Ireland).

8. Cookies

We use essential cookies to keep you logged in and functional cookies to improve your experience. We may also use analytics cookies with your consent. You can manage cookie preferences via the cookie banner when you first visit the site. See our Terms of Service for more information.

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use of SponsorTank after changes constitutes acceptance of the updated policy.