SponsorBar is a product of KickBot, Inc., a Delaware corporation (“SponsorBar,” “KickBot,” “we,” “us,” or “our”). This Privacy Policy applies to the SponsorBar website, dashboard, macOS application, advertising services, and related features (collectively, the “Service”).
This Policy does not govern an advertiser’s website or another third-party service that you choose to visit. Those services apply their own privacy policies.
1. Information we collect
Account and profile information
We collect information used to create, secure, and manage your account, such as your email address, display name, account roles, time zone, sign-in provider, authentication and internal account identifiers, referral relationship, settings, and email preferences. If you sign in with Google, GitHub, or X, the provider sends us the account information needed to authenticate you according to the permissions shown during sign-in. Our authentication provider processes credentials and sign-in activity on our behalf.
Mac, device, and impression information
When you pair and use the SponsorBar Mac application, we process a revocable device identifier, device name, authentication token or token hash, app version, session identifier, locale, country or region setting, display class, connection and last-seen times, and information required to decide whether an ad placement is eligible and to count a completed impression.
Eligibility signals include whether:
- the display is awake and the current macOS session is unlocked;
- the Mac has been used within the preceding five minutes;
- the menu-bar item is rendered and the menu bar is shown;
- the placement fits the display, including the notch or other safe areas; and
- macOS reports the placement as visible rather than covered.
We also process timing, campaign, reservation, impression, price, click, validity, and earning records. Because impressions must be credited to the correct account and Mac, SponsorBar’s internal records associate this information with a device and account.
What the Mac app does not collect
The SponsorBar Mac application does not collect:
- screenshots, screen recordings, or the contents of your screen, windows, or clipboard;
- the name of your foreground application or the title of a window;
- your browsing history;
- keystrokes or raw mouse activity; or
- Accessibility, Screen Recording, or Input Monitoring data.
The app reads the elapsed time since recent activity to determine eligibility; it does not record what you typed, clicked, or did.
Advertiser and campaign information
If you advertise through SponsorBar, we collect campaign and business information such as your company or brand name, creative text, logo, colors, destination URL, requested locations, campaign dates, budgets, rate, delivery settings, approval status, payment and credit records, and communications about the campaign. We may keep review decisions and supporting records used to confirm authorization, safety, accuracy, and compliance.
Payments, payouts, and tax information
Stripe processes advertiser payment details and Display User identity verification, payout accounts, bank details, and applicable tax information. SponsorBar receives and stores related information such as Stripe account and transaction identifiers, payout country, onboarding or verification status, payment and payout status, amounts, dates, refunds, and ledger entries. Information entered on a Stripe-hosted page is submitted to Stripe. SponsorBar does not intend to receive or store complete payment-card numbers, bank-account credentials, or identity documents collected by Stripe, although Stripe may provide us with verification results and information needed to administer transactions or meet legal obligations.
Website, referral, and technical information
When you use the Service, our systems and infrastructure providers may process your IP address, browser and device type, operating system, referring page, pages requested, timestamps, language, general location, and diagnostic, security, and request information. SponsorBar uses hashed network-address and browser information for referral attribution and hashed identifiers for rate limiting. A hash helps reduce exposure but may still be treated as personal information under applicable law.
If you use a referral link, we process the referral code, attribution window, referring account, related hashed technical information, and whether an account claimed the referral. If you pair a Mac, we process the device name, a hashed short-lived code, and pairing timestamps.
Communications, support, and connected services
We collect information you provide when you contact us, report a problem, request a privacy action, or otherwise communicate with SponsorBar. If you authorize a software agent or another connected service, we process its name and identifier, the permissions and actions you request, action results or errors, and connection, use, and revocation times.
2. How we use information
We use personal information to:
- provide, operate, maintain, and improve the Service;
- create and authenticate accounts and pair, manage, or revoke devices;
- select eligible campaigns and deliver, verify, count, and report impressions and clicks;
- calculate advertiser spend, Display User earnings, referrals, credits, refunds, and payouts;
- process payments and payouts and meet accounting, tax, sanctions, and other legal duties;
- review campaigns and protect users, advertisers, SponsorBar, and the public from harmful or deceptive content;
- detect, investigate, and prevent fraud, replay, manipulation, abuse, security incidents, and violations of our Terms;
- provide support and communicate about accounts, transactions, campaigns, alerts, security, changes, and the Service;
- honor email preferences and manage referrals and promotions;
- analyze performance, troubleshoot errors, develop features, and understand use of the Service; and
- establish, exercise, or defend legal claims and enforce our agreements.
3. Advertising, targeting, and reports
SponsorBar may select ads using contextual and operational information such as country, state or region, locale, device or display class, time, campaign pacing, availability, and frequency. General location may come from device settings, locale, or an approximate network-derived location and may be inaccurate. We do not provide an advertiser with a Display User’s name, email address, account ID, or device ID for campaign targeting.
Advertisers receive campaign reports such as aggregate impressions, spend, clicks, click-through rate, approximate unique Macs, and country or other general-location breakdowns. We do not give advertisers user-level browsing histories or permit them to use SponsorBar data to identify an individual Display User.
When you choose to open an ad, SponsorBar records the campaign, the one-time placement, the associated device, and the time so we can count the click. Your browser then makes a normal visit to the advertiser’s site, which may collect information under its own privacy policy. SponsorBar does not control the advertiser’s site.
4. Cookies and analytics
We use cookies and similar technologies that are necessary to keep you signed in, protect the Service, remember limited settings, and attribute an eligible referral. The current referral cookie generally expires after 14 days. Blocking necessary cookies may prevent account or dashboard features from working.
We operate analytics for SponsorBar through analytics.kickbot.com. Our current analytics helps us understand aggregate traffic, such as pages viewed, referral source, browser or device category, and general location. Network information may be processed to produce these measurements. We do not use SponsorBar analytics to create cross-site advertising profiles or to target third-party advertising to an identified person.
5. When we disclose information
We may disclose information in the following circumstances:
- Service providers. Vendors process information for hosting, databases, authentication, file storage and delivery, payments and payouts, email, analytics, security, support, and infrastructure. Current providers include Supabase, PlanetScale, Cloudflare, Fly.io, Stripe, and Resend.
- Sign-in and connected services. We exchange information with Google, GitHub, X, or another service when you choose it for sign-in, and with a software agent or integration when you authorize the connection or action.
- Advertisers and campaign reporting. We provide the aggregate and general-location reporting described above. We may also disclose information when needed to investigate a particular campaign, invalid activity, or dispute, while limiting it to what is reasonably necessary.
- Legal, safety, and compliance. We may disclose information if we reasonably believe it is required by law, legal process, or a valid government request, or is necessary to protect rights, safety, property, users, the public, or the integrity of the Service.
- Professional advisers. We may disclose information to auditors, insurers, lawyers, accountants, and other professional advisers subject to appropriate duties of confidentiality.
- Business changes. Information may be reviewed, transferred, or disclosed as part of financing, due diligence, a merger, acquisition, reorganization, sale of assets, bankruptcy, or a similar transaction, subject to applicable law.
- With your direction. We may disclose information for another purpose when you ask us to or give us consent.
SponsorBar does not sell or rent personal information. We do not share personal information for cross-context behavioral advertising, and we do not receive payment for disclosing personal information to advertisers. Display User earnings are payment for eligible ad-display services, not payment for personal information.
6. Automated processing and review
SponsorBar automatically applies campaign eligibility, pacing, frequency, visibility, timing, rate-limit, and fraud rules. These systems determine which campaign may be shown and whether an impression or click is counted, and they may flag activity for a hold or investigation. They do not examine the contents of your screen or track what you do in other apps.
Campaign approval, account-level holds, suspensions, and fraud investigations may involve human review. If you believe a material account, campaign, impression, earning, or payout decision is incorrect, contact [email protected] and provide enough information for us to investigate.
7. Legal bases for processing
Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, including providing advertising, measuring impressions, and administering payments and payouts; for our legitimate interests in operating, improving, securing, and promoting the Service and preventing fraud; to comply with legal obligations; and with consent where consent is required. We consider the nature of the information, the purpose, and your rights when relying on legitimate interests. You may withdraw consent at any time, without affecting processing that already occurred lawfully.
8. Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy. The period depends on the type of information, whether your account or campaign remains active, the duration of a transaction or referral, security and fraud-prevention needs, and applicable legal, tax, accounting, payment, dispute, and audit requirements.
For example, short-lived pairing, session, and rate-limit records are needed for operational and security windows, while financial ledger, payment, payout, campaign-approval, and audit records may need to be retained for substantially longer. We may retain information needed to resolve a dispute, enforce an agreement, prevent repeat abuse, or comply with law after an account closes. Residual copies may remain temporarily in backups or logs and are protected until deleted or overwritten. When information is no longer needed, we delete it, deidentify it, or aggregate it where reasonably practicable.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These include access controls, encrypted connections, credential hashing or keyed hashing where appropriate, provider security controls, and audit records for sensitive actions. No storage or transmission method is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your account credentials and should tell us promptly if you suspect unauthorized access.
10. International processing
KickBot is based in the United States, and SponsorBar and its providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from the country where you live. Where required, we use contractual or other recognized safeguards for international transfers and provide information about an applicable safeguard upon request.
11. Your choices and privacy rights
You can update certain profile and email preferences in SponsorBar settings, disconnect a paired Mac, revoke a connected service, and choose whether to open an advertiser’s link. We may send account, security, transaction, campaign, payout, service, and other necessary messages. You can manage optional email categories in Settings, but some operational messages are required while you maintain an account.
SponsorBar makes the following privacy requests available to all users, subject to verification and exceptions permitted by law: access to and a copy of personal information; correction; deletion; withdrawal of consent; and information about our processing and disclosures. Depending on where you live, you may also have rights to data portability, restriction, objection, appeal a denied request, or complain to your local privacy or data-protection authority.
Right to object. Where applicable, you may object to processing based on our legitimate interests or to processing for direct marketing. You can stop optional promotional email through SponsorBar Settings, and you may contact us about another objection.
To close an account or exercise a privacy right, email [email protected]. For other privacy questions, email [email protected]. Tell us which right you want to exercise and the account involved. We may ask for information reasonably necessary to verify your identity, authority, and request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct verification with the account holder. We will not discriminate against you for exercising a privacy right.
Some information cannot be deleted immediately or at all, including information we must retain for financial reporting, taxes, payment administration, security, fraud prevention, dispute resolution, or other legal obligations. If we deny or limit a request, we will explain why when required and tell you how to appeal where applicable.
12. United States state privacy disclosures
During the preceding 12 months, SponsorBar may have collected the categories of personal information described in this Policy: identifiers and account information; customer, payment, and payout records; commercial information; internet or other electronic activity; approximate geolocation; professional or business information supplied by advertisers; and inferences such as impression eligibility, campaign matching, or potential fraud signals. We collect these categories from you, the Mac app and your use of the Service, authentication and payment providers, connected services you authorize, and other users who make an eligible referral.
We use and disclose these categories for the purposes and to the recipients described in this Policy. During the preceding 12 months, we may have disclosed each of these categories to the service providers and other recipients described in Section 5 for the business purposes in Section 2. We do not knowingly use or disclose sensitive personal information to infer characteristics about an individual. We have not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months, including information about anyone under 16. Because we do not conduct those activities, there is no need to opt out of them at this time. We will update this Policy and provide any legally required choice before materially changing that practice.
13. Children
SponsorBar is not directed to children. You must be at least 18 years old to use the Service, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to SponsorBar, contact us so we can investigate and take appropriate action.
14. Changes to this Policy
We may update this Policy as SponsorBar, our providers, or applicable law changes. We will post the updated Policy and revise the “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice when required by law, such as through the Service or by email. Your use of SponsorBar remains subject to the Policy in effect when the relevant information is processed.
15. Contact us
For privacy questions, contact [email protected]. For an account closure, access, correction, deletion, or other privacy request, contact [email protected].
KickBot, Inc.
SponsorBar Privacy
150 Sutter Street, PO Box 402
San Francisco, California 94104
United States