Privacy Policy
At SponFy, we are committed to transparent, secure, and privacy-respecting operations for campaigns, events, and organizations. Here is how your data is handled.
Zero LLM Training
Your private emails, pitches, and organizer decks are never used to train public AI models.
AES-256 Encryption
OAuth access tokens and sensitive credentials are encrypted with AES-256 at rest and in transit.
Limited Gmail Scope
We adhere strictly to Google API User Data Policy & Limited Use requirements for Gmail operations.
Never Sold or Rented
Contact lists, campaign databases, and sponsor intelligence are never commercialized to third parties.
1Information We Collect
When you create an organizer workspace or execute sponsor campaigns on SponFy, we collect specific categories of information necessary to deliver our services:
- Account & Organizer Profile: Your name, official college email address, institution name, organization or campaign title, and contact details.
- Campaign & Pitch Inputs: Campaign deliverables, expected attendee numbers, tier pricing (Title, Associate, Gift Partner), brochures, and custom value propositions.
- Public Sponsor Intelligence: Corporate domain names, public brand press releases, job postings, CSR focus areas, and publicly accessible corporate contact information discovered via live web search.
- Communication Telemetry: Timestamp of approved outreach emails, delivery states, reply sentiment tags (e.g. Interested, Budget Exhausted, Follow-Up), and organizer approvals.
2How We Use Your Information
We use the information we process strictly for the following purposes:
- Providing automated research dossiers matching your campaign type with relevant corporate sponsors.
- Drafting tailored sponsor proposals and value proposition emails for your review and approval.
- Delivering approved messages through your connected Gmail account and parsing inbound responses for sponsorship status updates.
- Maintaining audit trails and telemetry on your organizer campaign dashboard.
- Preventing abuse, duplicate cold pitching, spam, or terms violations.
3Google API Services & Gmail Scopes Disclosure
Google API Limited Use Compliance
SponFy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your Gmail account to SponFy via Google OAuth:
- Send Scope: We only transmit outbound emails that have been explicitly confirmed and initiated by you via the Human Approval Gate.
- Read Scope: We only scan inbound email threads linked directly to active SponFy outreach campaigns to classify sponsor replies. We do not read, process, or archive unrelated personal or academic emails.
- Zero Human Surveillance: Our personnel do not read your private email messages unless explicitly requested for debugging with written consent.
4Security & Data Storage
We implement industry-standard cryptographic and administrative safeguards:
- All network traffic is encrypted in transit using Transport Layer Security (TLS 1.3).
- OAuth refresh tokens and sensitive tokens are encrypted at rest using AES-256 encryption.
- Databases are hosted in SOC 2-compliant cloud facilities with continuous automated backups and role-restricted query access.
5Subprocessors & Third-Party Services
To provide research intelligence and infrastructure, SponFy utilizes vetted subprocessors:
| Partner / Service | Function | Data Handled |
|---|---|---|
| Encrypted Cloud Database | Serverless Database | Encrypted account data & telemetry |
| Google Gemini API | AI Synthesis Engine | Campaign prompts & sponsor dossiers (No training) |
| Tavily AI | Live Search API | Public brand domains and company news queries |
6Your Rights & Data Portability
You retain complete control over your campaign records and organizer data:
- Right to Revoke: You can disconnect your Google OAuth credentials anytime directly from your dashboard or via Google Account Security settings.
- Right to Deletion: You may request complete erasure of your workspace, outreach logs, and account records upon campaign conclusion.
- Right to Export: Download all generated company dossiers, verified contact emails, and response logs in standard formats.
7Contact Us & Data Privacy Officer
If you have questions regarding this Privacy Policy or wish to exercise your data rights, contact our privacy team: