Privacy Policy

partnr.to is a sponsorship workflow platform for creators. References to “partnr.to,” “we,” “us,” or “our” in this policy mean the company that operates partnr.to.

We operate two types of users: Creators (who publish storefronts and manage bookings) and Advertisers (sponsors who book and pay creators). Different data applies to each, and we explain both.

We use the information we collect to:

• —Create and maintain your account and storefront
• —Process bookings and route payments via Stripe Connect
• —Generate and send Stripe invoices on your behalf (invoice-mode bookings)
• —Display verified audience metrics on your public storefront
• —Send transactional emails — booking confirmations, magic links, status notifications, and invoices
• —Operate the shared booking workspace and maintain a complete campaign record
• —Detect and prevent fraud, abuse, and policy violations
• —Improve the Platform through anonymised product analytics
• —Respond to support requests and enforce our Terms of Service

We do not use your information to train AI models, sell to data brokers, or serve third-party advertising.

Your partnr.to storefront is publicly accessible. The following information is visible to anyone with the link, including unauthenticated visitors:

• —Your display name and handle (partnr.to/yourhandle)
• —Your bio and storefront description
• —Verified and self-reported audience metrics
• —Past sponsors you have chosen to display
• —Audience demographics you have chosen to display
• —Your sponsorship packages, pricing, and booking modes

Your email address, Stripe account details, and booking history are never publicly visible. Consider this before adding personal details to your bio or demographics.

We share information only in these circumstances:

We retain your data for as long as your account is active or as needed to provide the Platform. Specifically:

• —Account data — retained until you request deletion; some data (booking records) may be retained for up to 7 years for legal and financial compliance
• —Booking workspace content — archived bookings are retained for a minimum of 2 years
• —Magic link tokens — single-use; expired tokens are deleted after 30 days
• —Analytics data — aggregated and anonymised; raw event data retained for 24 months
• —IP address logs — retained for 90 days for security purposes, then deleted

When you delete your account, we delete or anonymise personal information within 30 days, except where we are required to retain it for legal, financial, or fraud-prevention purposes.

We use a minimal set of cookies and similar technologies:

• —Session cookies — to maintain your authentication state on the dashboard
• —Booking session cookies — to maintain advertiser access to a specific booking workspace (30-day expiry)
• —Analytics cookies — PostHog uses a first-party cookie to track product usage anonymously

We do not use advertising cookies or third-party tracking pixels. We do not participate in cross-site ad targeting.

We implement the following measures to protect your information:

• —All data is transmitted over HTTPS/TLS
• —Passwords are never stored — authentication uses passwordless magic links via Supabase Auth
• —Platform API credentials (e.g., beehiiv keys) are stored encrypted using AES-256 encryption
• —Booking workspace access uses short-lived, single-use token links
• —Database access is restricted via Supabase Row Level Security policies
• —Payment data never touches our servers — handled entirely by Stripe

No system is perfectly secure. If you discover a security vulnerability, please report it to security@partnr.to.

Depending on your location, you may have the following rights over your personal information:

To exercise any of these rights, email privacy@partnr.to. We will respond within 30 days.

partnr.to is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.

partnr.to is operated from the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the US, where privacy laws may differ from those in your jurisdiction.

For users in the European Economic Area or United Kingdom, we rely on Standard Contractual Clauses and other appropriate safeguards for cross-border data transfers where required.

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• —The right to know what personal information we collect, use, disclose, and sell
• —The right to delete personal information we have collected about you
• —The right to opt out of the sale of personal information — we do not sell personal information
• —The right not to be discriminated against for exercising these rights

To submit a CCPA request, email privacy@partnr.towith “CCPA Request” in the subject line.

We may update this policy as the Platform evolves. When we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

For privacy questions, requests, or concerns:

Email: privacy@partnr.to
General support: support@partnr.to