Privacy Policy

Last updated: 2026

This Privacy Policy explains how PromotePals (“we”, “us”) collects, uses, and protects information when you use our newsletter discovery and sponsorship marketplace. This is a general template and should be reviewed by your legal counsel before launch.

Information we collect

  • Account data — name and email you provide at sign-up.
  • Listing data — newsletter details you publish (name, description, audience metrics, pricing, website).
  • Marketplace activity — sponsorship inquiries, cross-promotion requests, and verification requests.
  • Payment data — processed by our payment provider; we store transaction records (amount, status, product) but never full card details.
  • Usage & device data — analytics events, IP address, and browser information used to operate and improve the service.

How we use your information

To provide and maintain the marketplace, process verification and boost purchases, surface listings, send transactional and service emails, prevent fraud and abuse, and analyze product usage. We do not sell your personal information.

Service providers

We share data with processors strictly to run the service: hosting (Vercel), database and authentication (Supabase), payments (Dodo Payments), transactional email (Resend), product analytics (PostHog), and affiliate attribution (Endorsely). Each processes data only on our behalf.

Cookies & analytics

We use essential cookies for authentication and privacy-conscious analytics to understand how the product is used. Where required by law, we will request consent before non-essential tracking.

Data retention

We retain account and transaction data for as long as your account is active or as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

Your rights

You may access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise these rights, contact us via our contact page. You can delete most listing data directly from your dashboard.

Security

We use industry-standard measures including encryption in transit, row-level database security, and scoped access controls. No method of transmission or storage is completely secure.

Changes & contact

We may update this policy from time to time; material changes will be posted here. Questions? Reach us through our contact page.