Privacy Policy
Last updated: 2026
This Privacy Policy explains how PromotePals (“we”, “us”) collects, uses, and protects information when you use our newsletter discovery and sponsorship marketplace. This is a general template and should be reviewed by your legal counsel before launch.
Information we collect
- Account data — name and email you provide at sign-up.
- Listing data — newsletter details you publish (name, description, audience metrics, pricing, website).
- Marketplace activity — sponsorship inquiries, cross-promotion requests, and verification requests.
- Payment data — processed by our payment provider; we store transaction records (amount, status, product) but never full card details.
- Usage & device data — analytics events, IP address, and browser information used to operate and improve the service.
How we use your information
To provide and maintain the marketplace, process verification and boost purchases, surface listings, send transactional and service emails, prevent fraud and abuse, and analyze product usage. We do not sell your personal information.
Service providers
We share data with processors strictly to run the service: hosting (Vercel), database and authentication (Supabase), payments (Dodo Payments), transactional email (Resend), product analytics (PostHog), and affiliate attribution (Endorsely). Each processes data only on our behalf.
Cookies & analytics
We use essential cookies for authentication and privacy-conscious analytics to understand how the product is used. Where required by law, we will request consent before non-essential tracking.
Data retention
We retain account and transaction data for as long as your account is active or as needed to comply with legal obligations, resolve disputes, and enforce our agreements.
Your rights
You may access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise these rights, contact us via our contact page. You can delete most listing data directly from your dashboard.
Security
We use industry-standard measures including encryption in transit, row-level database security, and scoped access controls. No method of transmission or storage is completely secure.
Changes & contact
We may update this policy from time to time; material changes will be posted here. Questions? Reach us through our contact page.