Effective date: June 1, 2026
PartnerOS ("we," "us," or "our") operates the PartnerOS platform at partneros.xyz — an intelligence platform for sports, media, and entertainment partnerships. This Privacy Policy explains how we collect, use, and protect your information when you use our services.
Account information: When you sign up, we collect your email address and organization name.
Profile information: Role (brand or rights-holder), industry, and organization details you provide during onboarding.
Inventory and deal data: Partnership assets, pricing, deal terms, and related business data you enter into the platform.
Usage data: Pages visited, features used, and actions taken within the platform (used to improve the product).
Communications: Messages and proposals exchanged through the platform's deal workflow.
We use your information to:
We do not sell your personal information to third parties.
Within a deal: When a brand expresses interest in your inventory item, your organization name and asset details are shared with that brand. When you send a proposal, the terms are shared with the receiving party.
Service providers: We share data with the sub-processors listed in Section 12 solely to operate the platform. Each is bound by a data processing agreement (DPA). See Section 12 for the full list.
Anonymised benchmarks (opt-in): If you choose to contribute to the PartnerOS benchmark network, only category-level aggregate data is shared — no individual deal amounts, company names, or contact information.
We implement industry-standard security measures including row-level security at the database layer, encrypted connections (TLS), and server-side session management. All sensitive credentials are stored in encrypted environment variables and never committed to source code.
Despite these measures, no internet transmission is 100% secure. We encourage you to use a strong password and keep your credentials confidential.
We retain different categories of data for different periods based on the legal basis for processing. The full schedule is documented in our Data Retention Policy. Key retention periods:
| Data Category | Retention Period | Basis |
|---|---|---|
| Inventory items | Subscription + 2 years | Contract |
| Deal records | 7 years | Legal obligation |
| Audit log | 7 years | Legal obligation |
| User profile | Until erasure request + 30 days | Consent |
| Email addresses | Until unsubscribe or erasure | Legitimate interest |
| Analytics events | 24 months | Legitimate interest |
| Consent log | 7 years | Legal obligation |
Depending on your location, you may have the right to:
To exercise any of these rights, contact us at privacy@partneros.xyz.
We use strictly necessary cookies for authentication (session management). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required.
PartnerOS is not directed at children under 18. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.
Questions about this Privacy Policy? Contact us at privacy@partneros.xyz.
We use the following sub-processors to operate the platform. Each is bound by a Data Processing Agreement (DPA). None retain personal data beyond the purpose for which it was shared.
| Subprocessor | Category | Location | Data Processed | DPA |
|---|---|---|---|---|
| Supabase | Database / Auth | USA (EU region available) | All user and platform data | Yes |
| Vercel | Hosting / CDN | USA + global edge | Request metadata, logs | Yes |
| Stripe | Payments | USA | Payment data, deal amounts | Yes |
| Resend | Email delivery | USA | Email addresses, notification content | Yes |
| Anthropic | AI processing | USA | Inventory descriptions, deal summaries | Yes |
| PostHog | Analytics | EU (EU Cloud) | Usage events, session metadata | Yes |
| Cloudflare | Bot protection | Global | IP addresses (not stored) | Yes |
| Upstash | Rate limiting | Global | IP addresses, rate counters | Yes |
Version 2 · Last reviewed: June 3, 2026