Sponlio Privacy

Sponlio stores the creator-platform data a creator authorizes. Instagram data can include profile metadata, media metadata, account insights and media-level insights. Connected YouTube/TikTok data can include profile identity, follower/subscriber counts and recent public-content performance returned by those official APIs. OAuth access and refresh tokens are encrypted at rest so creators can sync their accounts. Creators can also choose to store a public headline, location, collaboration email, category, public asking-rate overrides, an external creator payment/booking URL with its button label and note, and referral activity for their media kit and invite tools. When a visitor uses a media-kit payment button, Sponlio can store a click event timestamp and limited referrer text so the creator can see click activity; Sponlio does not receive payment-provider card or transaction data through this feature. Sponlio Pro creators can store private brand CRM details, brand-outreach prospects, pitch drafts/sent-message records, personalized media-kit view events, follow-up dates, deal terms, deliverables, deadlines, negotiation history, campaign-to-content links, campaign metric snapshots, invoice identity/payment instructions, invoices and payment-status records, creator-business expenses and follow-up reminders for their own workflow. Sponlio also stores daily Creator Intelligence snapshots such as follower count, Sponlio Score, recommended Reel rate and summarized performance so creators can see historical trends. Category benchmarks use aggregated connected-creator snapshot data and only expose cohort statistics after a minimum sample threshold; they do not expose another creator’s private account record. Brand-facing report and invoice pages are accessible to anyone who has their unguessable share URL, so creators should share those URLs only with intended recipients. Access tokens are encrypted at rest and are never exposed in public creator profiles.

Creators can disconnect Instagram or delete their Sponlio account from the app. Account deletion removes the creator account, stored Instagram, YouTube and TikTok connections, imported platform/media metadata, account/media insight snapshots, Creator Intelligence history snapshots, media-kit settings, rate overrides, media-kit payment-link click events, private brand/deal/outreach CRM records, personalized outreach-link events, pitch records, contract review text and findings, generated deal memos/agreements, saved AI-assistant outputs, campaigns, sponsored-content metric snapshots, invoices, invoice profile/payment instructions, deliverables, deal activity, referral records/codes, billing linkage records, and active sessions from Sponlio's database. If the account has a Stripe web subscription, Sponlio requests cancellation when the account is deleted. App Store subscriptions are managed by Apple and must be cancelled through Apple separately.

For subscription operation Sponlio stores the minimum billing linkage and entitlement state needed to determine Pro access, such as provider, product/price identifier, external subscription identifier, status, expiration/renewal state and Stripe customer mapping. Payment card details are not stored by Sponlio.

Sponlio's manual creator-outreach CRM can store public Instagram usernames, approximate follower counts, niche labels and outreach notes. It does not send automated Instagram messages. When a matching creator deletes their Sponlio account, the matching outreach record is removed as well.

Sponlio can also maintain a shared brand directory containing business names, categories, websites, countries and business contact paths such as public-facing business email addresses and Instagram/TikTok handles imported from CreatorScout or other administrative sources. These shared directory records are not creator-account data and can be updated or removed independently as business information changes. Creators who add a directory brand to their private outreach pipeline receive a private snapshot in their own CRM.

Contact: privacy@boxtheorylabs.com