Nexmoe, an individual operator based in the People's Republic of China, operates SponNow and is the data controller for the personal information described in this policy. “SponNow,” “we,” “us,” and “our” refer to this operator.

For a privacy request or question, email nexmoei@gmail.com. We use this monitored address for privacy and security matters.

We collect only data needed to operate SponNow:

• Account and authentication data: name, email address, optional avatar, account identifiers, verification status, encrypted or hashed authentication credentials, session token, session expiry, IP address, and browser user-agent.
• Creator and project data: display name, biography, location, website and social links, work descriptions, tags, images, sponsorship plans, prices, benefits, and fulfillment notes.
• Sponsorship and checkout data: receipt email, selected plan, amount, currency, subscription status, transaction and provider identifiers, and—when provided—public display type, sponsor or company name, avatar or logo URL, website URL, and public message.
• Payment data from Waffo Pancake: checkout, order, subscription, refund, and payment-status events. Full card numbers and card security codes are collected and handled by Waffo Pancake, not stored on SponNow servers.
• Agent and security data: authorized agent names, public keys, capability grants, approval status, timestamps, device or host metadata, and security/audit records.
• Support and technical data: messages you send us, request timestamps, error details, and limited server logs used to diagnose reliability, abuse, and security issues.

We do not intentionally collect sensitive personal information. Please do not include government identifiers, health information, financial account numbers, or other sensitive data in public profiles or messages.

• Contract: create and secure accounts, publish requested profiles, process sponsorships, administer subscriptions, provide benefits, maintain order history, and respond to support requests.
• Legitimate interests: prevent fraud and abuse, secure and debug the service, understand reliability, enforce our Terms, and display sponsor details in the way you selected. We balance these interests against your rights.
• Consent: publish optional profile or sponsorship fields and send promotional communications if we specifically ask for consent. You can withdraw consent at any time.
• Legal obligations: keep tax and accounting records, respond to valid legal requests, investigate unlawful activity, and meet payment and consumer-protection requirements.

SponNow currently uses only strictly necessary cookies and similar storage for sign-in sessions, security, request continuity, and interface preferences. These technologies are required for requested features and are not used for cross-site advertising. We do not currently use third-party advertising or analytics cookies.

You can block cookies in your browser, but account, dashboard, billing management, and security features may then stop working. If we add non-essential cookies, we will update this policy and request consent where required.

We do not sell or rent personal information. We share it only as follows:

• Waffo Pancake: billing email, customer and order identifiers, amount, currency, selected product, and related metadata for checkout, tax, payment, subscription, refund, fraud prevention, and customer support.
• Cloudflare: hosting, content delivery, database and object storage, network security, and operational logging.
• The creator or project you sponsor: order details needed to recognize the sponsorship and fulfill promised benefits, including the receipt email. If you select a public option, the chosen name, avatar, link, and message may appear on the public Sponsor Wall. An anonymous choice prevents public display but not operational sharing.
• Legal and safety disclosures: authorities, advisers, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or establish legal claims.
• Business changes: a potential or completed buyer, investor, successor, or adviser in a reorganization or transfer, subject to appropriate confidentiality and notice obligations.

Service providers may use the information only to perform contracted services or meet their own legal obligations. They may not use it for their independent advertising.

We use encrypted connections, hashed passwords, signed payment webhooks, access controls, expiring credentials, and audit records designed to protect personal information. Access is limited to people and systems that need it. No method of storage or transmission is completely secure, so we cannot promise absolute security.

If a breach creates a risk to your rights, we will investigate, contain it, and notify affected people and regulators as required by law. Where applicable, we aim to notify the relevant authority within 72 hours after becoming aware. Report suspected incidents to nexmoei@gmail.com.

We keep personal information only for a defined business or legal need. Our standard retention periods are:

• Accounts, profiles, content, and uploaded assets: while the account is active, then deletion or anonymization within 90 days of a verified deletion request. Residual backup copies may remain for up to a further 90 days and are isolated from ordinary use.
• Expired sessions and verification records: until expiry and for no more than 30 days afterward, unless needed for a security investigation.
• Payment, subscription, refund, transaction, and tax records: 7 years after the transaction or subscription ends, to meet accounting, tax, dispute, and fraud-prevention obligations.
• Security and agent audit records: up to 12 months after the recorded activity, or longer while investigating a specific incident.
• Support communications: up to 2 years after the request is closed.

Subscription cancellation does not delete an account or accounting records. We may keep a limited record longer when law requires it, a dispute remains open, or it is necessary to protect the service; when possible, we minimize or anonymize that record.

Depending on where you live, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal information; object to certain processing; withdraw consent; or complain to your local data protection authority. You may also ask us to remove your public sponsor display without deleting required payment records.

Send a request to nexmoei@gmail.com. We may verify your identity and ask for enough information to locate the record. We normally respond within 30 days, or sooner if local law requires. If we need a lawful extension, we will explain why. You may authorize an agent where applicable, and you may appeal a refusal by replying to our decision.

We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or targeted-advertising opt-out to exercise at this time. We will not discriminate against you for exercising a privacy right.

We may send service messages needed for account security, receipts, billing, subscription status, policy notices, or support. These are not promotional messages. We do not currently send promotional marketing emails. If that changes, we will provide a clear opt-in or opt-out as required, and withdrawing marketing consent will not stop necessary service messages.

SponNow, Waffo Pancake, Cloudflare, and their subprocessors may process information in countries other than your own. Where the destination does not provide an equivalent level of legal protection, we use safeguards required by applicable law, such as contractual protections, the European Commission’s Standard Contractual Clauses, or another approved transfer mechanism. You may request information about applicable safeguards by contacting us.

SponNow is not directed to anyone under 18, and people under 18 may not create accounts or purchase sponsorships. We do not knowingly collect personal information from children. If you believe a child provided data, contact us and we will investigate and delete it where required.

Creator profiles, works, sponsor messages, and payment pages may link to third-party sites. Their privacy practices are governed by their own policies, not this one. Review those policies before providing personal information. We are not responsible for third-party content or practices.

We may update this policy as the service, providers, or law changes. We will update the date above and, for a material change, provide at least 14 days’ advance notice by email or a prominent in-service notice unless an urgent legal or security change requires faster action. We will ask for consent if a new use legally requires it.

The data controller is Nexmoe, an individual operator based in the People's Republic of China. Email privacy, security, deletion, or complaint requests to nexmoei@gmail.com. Please include the email associated with your account or payment and enough detail to identify the request. You also have the right to complain to the data protection authority where you live, where you work, or where an alleged violation occurred.