# Your data on sponsorgrab

Plain English, no legalese. If anything here is unclear, ask.

## What's yours alone

Everything you enter or that sponsorgrab generates *for you* is private to your
account. No other publisher can see it — not your competitors, not anyone else
using the tool. This is enforced by the database itself (Postgres row-level
security), not by a promise in the app code, and it's checked by an automated
two-tenant attack test that tries to break it.

That includes:

- **Your profile** — newsletter name, audience, subscriber count, your ad rates,
  contact details, everything on your Configure screen.
- **Your ratings and feedback** — every "good pick" / "bad pick" you give a
  prospect.
- **Your pitch outcomes** — what you pitched, who replied, what you booked.
- **Your deals and pipeline** — your CRM: notes, stages, drafts.
- **Your contacts** — the sponsor contacts you enter or that sponsorgrab finds
  for you are yours. Another publisher never sees them.
- **Your reports** — your daily prospect email, your prospect lists, your
  outreach drafts.

## What's shared — and why it helps you

Sponsorgrab watches which companies advertise in newsletters, by reading public
newsletter archives and forwarded issues. That record of **who sponsored which
newsletter, and when** is the shared database every publisher benefits from — it's
what makes the prospect scoring work at all. The more publishers use sponsorgrab,
the better that shared picture gets, and your scoring gets better with it.

Two things about the shared database:

- It's **observations of ads that already ran in public** — a sponsorship is a
  public act. It is not anything private you typed in.
- It is **never attributed to you.** If issues you forward help spot a new
  advertiser, that advertiser goes into the shared database, but *the fact that
  you were the one who forwarded it stays private.* No other publisher can learn
  which newsletters you read or forward.

## What the operator can access

Honest answer: sponsorgrab is run by a person (Mark) and an automated pipeline,
and to provide the service they can technically read the data you store — the
same way the operator of any hosted tool can. The pipeline reads your profile to
score prospects, sends your email, and reconciles your data. There is **no
end-to-end encryption** and this page does not claim otherwise. What we do
promise is the boundary that matters to you commercially: **no other publisher
can see your data.**

## Questions

Email the address on the sign-in screen. If you want your account and its data
deleted, ask — we'll remove it.