Spont Pty Ltd ("Spont", "we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, hold, use, disclose and protect your personal information when you use the Spont platform (the "Service").
1. Information we collect
We collect personal information that you provide to us directly, as well as information generated automatically through your use of the Service. This includes:
- Identity information: full name, date of birth, email address, phone number, business / club name and ABN where applicable.
- Account information: username, hashed password, role (club or sponsor), profile photo, organisation details, and preferences.
- Financial information: bank account details, Stripe Connect account identifiers, transaction history, invoices and payout records. We do not store full card numbers — these are tokenised by Stripe.
- Verification information: documents you submit to verify your identity, your club's ABN, or your right to act on behalf of an organisation.
- Communications: messages, files, photos and proof-of-delivery uploads exchanged inside the Spont deal room.
- Technical information: IP address, device identifiers, browser type, operating system, referring URLs, pages visited, cookies and similar tracking data.
2. How we collect your information
We collect personal information directly from you when you create an account, complete a profile, list a sponsorship package, fund or release escrow, or contact our support team. We also collect information automatically through cookies and analytics tools, and from third-party service providers such as Stripe (for payments and identity verification) and Supabase (for authentication and database hosting).
3. Why we collect and use your information
We collect and use your personal information to:
- Create and administer your Spont account.
- Match clubs with sponsors and facilitate sponsorship transactions.
- Process payments, hold funds in escrow, release milestone payouts and generate ABN-compliant tax invoices.
- Verify your identity, prevent fraud, and meet our obligations under anti-money-laundering and counter-terrorism financing laws.
- Communicate with you about your account, transactions, support requests and (with your consent) marketing.
- Improve, secure and develop new features of the Service.
- Comply with our legal and regulatory obligations.
4. Disclosure of your information
We may disclose your personal information to:
- Stripe Payments Australia Pty Ltd, our payment and Connect-account provider, for the purposes of processing payments, payouts, KYC and AML checks.
- Supabase Inc., our authentication and database provider, which hosts data on our behalf.
- Other users of the Service strictly to the extent necessary to facilitate the deal you have entered into (for example, your name and club details are visible to a sponsor you are negotiating with).
- Our professional advisors (legal, accounting, audit) bound by confidentiality obligations.
- Government agencies, law enforcement or regulators where required or authorised by law.
- A purchaser of Spont or its assets in the event of a sale, merger or restructure, subject to equivalent privacy protections.
5. Overseas disclosure
Some of our service providers store data outside Australia, including in the United States and the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient is bound by equivalent privacy obligations or to obtain your consent.
6. Cookies and analytics
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service and measure how it is used. You can disable cookies in your browser, but parts of the Service may not function correctly without them.
7. Security
We protect your information using bank-grade encryption in transit and at rest, role-based access controls, audited security policies and Row-Level Security on our database. While we take reasonable steps to protect your data, no online service can be guaranteed 100% secure. You are responsible for keeping your account credentials confidential.
8. Data retention
We retain your personal information for as long as your account is active and for a reasonable period afterwards to comply with our legal obligations (including a minimum of seven (7) years for tax and financial records under Australian law), to resolve disputes and to enforce our agreements.
9. Accessing and correcting your information
You may access, correct or delete most of your personal information directly from your Spont profile. If you would like a copy of all information we hold about you, or you believe information is incorrect, please email contact@spont.club.
10. Complaints
If you believe we have breached the Australian Privacy Principles, please contact us at contact@spont.club with the details of your concern. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Children
The Spont Service is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us so we can delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last changed. We will notify you of material changes by email or in-app notice.
13. Contact us
Spont Pty Ltd · Melbourne, Victoria, Australia · contact@spont.club