Home/Privacy Policy

Privacy Policy

Effective: February 19, 2026
Last updated: February 19, 2026

This policy explains what personal information TrySpansa collects, why, and what rights you have over it. We wrote this in plain language because you should actually be able to read it.

01

Who We Are

TrySpansa (“we,” “us,” “our”) operates a sponsorship marketplace at tryspansa.com that connects agencies & brands with YouTube creators for sponsored content partnerships. We facilitate discovery, negotiation, and payment between both parties.

02

What We Collect

What we collect depends on how you interact with TrySpansa. We’ve organized this by user type so you can skip to what’s relevant to you.

Website Visitors (no account)

If you browse TrySpansa without signing up, we do not collect personally identifying information. We do not set cookies. We do not use Google Analytics, Facebook Pixel, or any third-party tracking service. No IP addresses, email addresses, or other identifying data are stored with your activity.

On guide articles (/guides/*), we record anonymous engagement signals — scroll depth, reading time, and which in-page links are clicked — grouped together with a randomly-generated Reader ID stored in your browser’s localStorage. The Reader ID lets us measure whether the same browser returns to read new articles; it is not linked to any identity, email, IP address, or third-party service. These signals are used solely to improve our articles. See Section 06 for browser-storage details.

The channel data you see on our homepage is either publicly available YouTube data or information submitted by creators who have registered on our platform.

Creators (signup + YouTube connection)

DataSourcePurpose
Email addressYou provide at signupAccount authentication, notifications
Display nameYou provide at signupPublic profile identity
YouTube channel data (name, subscribers, views, images)YouTube API (youtube.readonly scope)Display your channel to potential sponsors
YouTube audience analytics (demographics, geography, traffic sources, watch time, device types)YouTube Analytics API (yt-analytics.readonly scope)Help agencies & brands evaluate audience fit for sponsorship campaigns
YouTube revenue metrics (estimated CPM, revenue, ad impressions)YouTube Analytics API (yt-analytics-monetary.readonly scope)Help you set competitive sponsorship rates (visible only to you, never shared with agencies & brands)
Stripe Connect account IDCreated when you connect StripeReceive payments from completed deals

Agencies & Brands (signup)

DataSourcePurpose
Email addressYou provide at signupAccount authentication, notifications
Display nameYou provide at signupProfile identity
Company name & websiteYou provide at signupDisplayed to creators for transparency
Business email (optional)You provideCompany verification
Stripe customer IDCreated when you make a paymentProcess payments for deals

Public YouTube Channel Data

We collect publicly available information about YouTube channels using the YouTube API, including channel names, subscriber counts, profile images, and banner images. This data is used to help agencies & brands discover potential creator partners on our platform and may be used in TrySpansa marketing and promotional materials (e.g., website, social media, email campaigns).

If your YouTube channel appears on TrySpansa and you did not register with us, you may request removal by contacting us at privacy@tryspansa.com. We will remove your channel data within 10 business days.

Deal & Payment Data

When agencies & brands and creators enter into sponsorship deals through TrySpansa, we collect deal terms, pricing, messages exchanged between parties, and video performance data (view counts) for deals with performance-based pricing. Payment card details are processed directly by Stripe and never touch our servers.

03

How We Use It

PurposeLegal Basis
Operate the marketplace (matching agencies & brands with creators)Contract performance
Process payments via StripeContract performance
Send transactional emails (deal updates, account verification)Contract performance
Send outreach emails to potential creatorsLegitimate interest (CAN-SPAM compliant)
Track video views for performance-based deal pricingContract performance
Display creator profiles to agencies & brandsContract performance / Legitimate interest
Feature publicly available channel data (name, image, subscriber count) in TrySpansa marketing materialsConsent (Terms of Service Section 4) / Legitimate interest
Display audience analytics (demographics, traffic sources) to agencies & brands evaluating sponsorshipsContract performance
Display revenue metrics on creator dashboard to help set fair sponsorship rates (creator-only, never shared with agencies & brands)Contract performance
Prevent fraud and enforce our Terms of ServiceLegitimate interest

We do not sell your personal information to third parties or share it with third-party advertisers. TrySpansa may feature publicly available channel data (name, profile image, subscriber count) in its own marketing materials as described in our Terms of Service.

04

Who We Share With

Third PartyWhat We ShareWhy
Stripe, Inc.Payment amounts, customer/account IDsPayment processing and creator payouts
ResendEmail addressesTransactional and outreach email delivery
YouTube API ServicesChannel IDs, search queriesFetch channel data for creator profiles
Supabase (infrastructure)All account dataDatabase hosting and authentication

We do not sell, rent, or trade your personal information to advertisers, data brokers, or any other third parties. We share data only with the service providers listed above, solely for operating TrySpansa.

05

YouTube API Services & Google OAuth

TrySpansa uses YouTube API Services and Google OAuth 2.0 for authentication and YouTube channel connections. By using TrySpansa, you agree to be bound by the YouTube Terms of Service. Please refer to the Google Privacy Policy for information about how Google handles your data.

OAuth Scopes We Request

When you sign in or connect your YouTube channel, TrySpansa requests the following permissions via Google OAuth 2.0. We request only the minimum scopes necessary for the features described below.

ScopeWhat This AllowsWhy We Need It
openidAssociate your Google account with TrySpansa for sign-in.Account authentication. Required for secure login via Google.
userinfo.emailSee your primary Google Account email address.Account creation and transactional notifications (deal updates, verification).
userinfo.profileSee your name and profile picture.Display your identity on your TrySpansa profile.
youtube.readonlyView your YouTube channel name, description, subscriber count, total views, video count, profile image, and banner image. We cannot modify your channel or upload content.Verify channel ownership and display your channel on TrySpansa so agencies & brands can find you.
yt-analytics.readonlyView your YouTube Analytics reports: audience demographics (age, gender), geography (top countries), traffic sources, device types, content format performance, watch time, thumbnail CTR, and subscriber trends. We cannot modify any data.Display audience insights on your profile so agencies & brands can evaluate audience fit for sponsorship campaigns.
yt-analytics-monetary.readonlyView your YouTube revenue reports: estimated CPM, estimated revenue, ad impressions, and monetized playback counts. We cannot modify your monetization settings.Display revenue metrics on your creator dashboard to help you set competitive sponsorship rates. This data is visible only to you and is never shared with agencies & brands or any third party.

Who Sees Your Data

Not all YouTube data is shared equally. Here is exactly who can see what:

Data CategoryVisible To
Channel info (name, subscribers, images, videos)Your public TrySpansa profile — visible to agencies & brands and other signed-in users. May also appear in TrySpansa marketing materials.
Audience analytics (demographics, geography, traffic sources, watch time)Signed-in agencies & brands browsing your profile — helps them evaluate sponsorship fit
Revenue metrics (CPM, estimated revenue, ad impressions)Only you on your creator dashboard — never shared with agencies & brands, advertisers, or any third party
Google account info (email, name)Only TrySpansa — used for authentication and notifications, never displayed publicly

What We Do Not Do With Your Data

  • Sell, rent, or transfer your YouTube data to advertisers, data brokers, or any third parties.
  • Use your YouTube data to serve advertisements of any kind, including retargeting or interest-based ads.
  • Use your YouTube data for credit assessments or lending decisions.
  • Modify, delete, or upload content to your YouTube channel.
  • Access your private messages, emails, or Google Drive files.
  • Train AI or machine learning models on your YouTube data.

Data Storage & Retention

YouTube channel data and analytics authorized by creators are refreshed daily via a scheduled process while the channel connection is active. Non-authorized YouTube data (publicly available channel information) is refreshed or removed within 30 days per YouTube API policies. We never store your Google or YouTube password. OAuth access tokens are encrypted at rest and transmitted exclusively over HTTPS.

Revoking Access

You can disconnect your YouTube channel at any time:

  • From your TrySpansa creator dashboard (Disconnect Channel button), or
  • Via Google's security settings at https://security.google.com/settings/security/permissions

When you revoke access, we will delete your YouTube data — including stored OAuth tokens, channel data, analytics, and revenue metrics — within 7 calendar days.

Google API Services Compliance

TrySpansa’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

06

Cookies & Storage

Our cookie usage is minimal. We do not use cookies for tracking, advertising, or analytics.

Cookie / StorageWhen SetPurposeDuration
Supabase session tokenAfter you sign inKeeps you logged inSession (cleared on logout)
Sign-in preferenceAfter you sign inRemembers your preferred login methodPersistent
Post-auth redirectWhen you visit sign-in from another pageReturns you to the page you were viewing after login10 minutes (deleted after redirect)
Team invite tokenWhen you click a team invite linkConnects you to the team after sign-in10 minutes (deleted after redirect)
Referral codeWhen you click a referral linkCredits the person who referred you30 days
YouTube OAuth securityWhen you connect your YouTube accountPrevents cross-site request forgery during YouTube authorization10 minutes (deleted after authorization)
Article view dedup (browser sessionStorage)When you view a guide articlePrevents counting the same view twice if you refresh the pageSession (cleared when tab closes)
Feedback dedup (browser sessionStorage)When you submit article feedbackPrevents accidentally submitting feedback twice on the same articleSession (cleared when tab closes)
Reader ID (browser localStorage)When you first view a guide articleRandom identifier so we can measure whether the same browser returns to read new articles. Not linked to identity, email, or IP.Until you clear browser data (Safari clears after 7 days of inactivity)

Anonymous visitors: No cookies are set. Three small non-identifying browser markers are used: two in session memory (sessionStorage) to prevent duplicate view counts and duplicate feedback submissions, and one in persistent localStorage — a random Reader ID that lets us measure whether the same browser returns to read new articles. See the table above for details. These are not tracking: no personal data, no IP storage, no cross-site correlation, no third parties, no advertising, no fingerprinting. The sessionStorage markers clear when you close the tab; the Reader ID persists until you clear your browser data (Safari clears it automatically after 7 days of inactivity).

Do Not Track: Because we do not track users across third-party websites, there is no tracking behavior to modify in response to Do Not Track browser signals.

07

Data Retention

Data CategoryRetention Period
Account data (email, name, company info)Kept while your account is active. Deleted when you delete your account.
Creator YouTube channel data (authorized)Refreshed while account is active. Deleted within 7 days of OAuth revocation.
Creator YouTube analytics and revenue data (authorized)Refreshed daily while channel is connected. Deleted within 7 days of OAuth revocation.
Public YouTube data (non-authorized)Refreshed or removed within 30 days per YouTube API policies.
Deal recordsKept for legal, tax, and dispute resolution purposes after deal completion.
Messages between deal partiesKept for the duration of the deal. Deleted with the deal record.
Email unsubscribe recordsKept indefinitely (required by CAN-SPAM for compliance).
Payment records (Stripe IDs, amounts)Kept for tax and legal compliance as required by law.
Anonymous engagement data (scroll depth, reading time, clicks, Reader ID)1 year from collection. Automatically deleted daily by a scheduled database cleanup job.
08

Your Rights

Regardless of where you live, you can:

  • AccessRequest a copy of the personal information we hold about you.
  • CorrectionAsk us to fix inaccurate information.
  • DeletionRequest that we delete your account and personal data.
  • Opt-out of emailsUnsubscribe from outreach emails at any time via the link in each email.
  • Revoke YouTube accessDisconnect your YouTube account through Google Security Settings.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to know what personal information we collect, use, and share.
  • Right to delete your personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information. We do not sell or share your personal information.
  • Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at privacy@tryspansa.com. We will respond within 45 days.

09

Security

We take reasonable measures to protect your personal information:

  • Passwords are hashed and salted (handled by Supabase authentication).
  • All payment card data is processed by Stripe (PCI-DSS Level 1 compliant). We never see or store card numbers.
  • Row-level security policies restrict database access by user role.
  • All data transmitted over HTTPS encryption.
  • Service-role-only access to sensitive tables (scraper data, outreach emails).

No system is perfectly secure. If we discover a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

10

Children

TrySpansa is for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.

11

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes that affect how we handle your personal information, we will notify registered users by email before the changes take effect. Non-material changes (wording clarifications, formatting) will be reflected in the “Last updated” date at the top of this page.

12

Contact

For any privacy-related questions, requests, or complaints:

Email: privacy@tryspansa.com

Mail: TrySpansa · 784 S. Clearwater Loop, STE R · Post Falls, ID 83854

Response time: Within 45 days for formal privacy requests. Sooner for general questions.