Privacy policy

Spotlight Analytics ("Spotlight", "we", "us") provides competitive intelligence on creator sponsorships in the sportsbook and prediction market industries. This policy explains what personal information we collect through spotlight-analytics.com and app.spotlight-analytics.com (the "Services"), how we use it, and the choices you have.

• Access requests. When you request access we collect your name, work email, company, industry, the modules you are interested in, how you heard about us, and, if you choose to share them, your role and how you would use Spotlight.
• Accounts. If you are invited, we collect your email address and the password you set. Passwords are stored in hashed form by our authentication provider; we never see them.
• Billing. If you subscribe, our payment provider collects the details needed to invoice you and take payment. We see your invoice status, never your full card or bank account numbers.
• Correspondence. If you email us, we keep the message and your contact details so we can reply.

• Server logs. Our hosting provider records technical information when you visit, such as your IP address, browser type, pages requested, and the time of the request. We use it to keep the Services running and secure.
• Essential storage. When you sign in, your browser stores a session token so you stay signed in. Entries you type into the "Your position" tool on our homepage are saved only in your own browser and are never sent to us.
• Product usage. When you are signed in to the dashboard, we record which pages and features you use and for how long, so we can improve the product and understand which features matter. This stays with us, is tied to your account, and is deleted after 180 days.
• Newsroom reading counts. When you open a story in our newsroom, we add one to that story's count of views for the day. We do not record who read it, set a cookie or keep your IP address. Your browser remembers, for that visit only, that the story was counted, so reloading it is not counted twice.
• We do not use advertising cookies, and we do not use third-party analytics or tracking tools.

To produce our reports, Spotlight uses publicly available information about creators, such as channel names, audience size and public profile images. We do not collect private information about creators.

If you are a creator and believe information about you is inaccurate, or you would like to ask about how it is used, contact us at wallace.davi@northeastern.edu.

• To review access requests and reply to you.
• To create and secure your account, sign you in, and send emails you ask for, such as sign-in links and password resets.
• To provide, maintain, and improve the Services.
• To prevent fraud and abuse and to comply with the law.

We do not sell your personal information, and we do not share it for targeted advertising.

We share it only with service providers that help us run the Services, under contracts that limit their use of it:

• Vercel: website hosting.
• Supabase: account sign-in and database storage.
• Resend: email delivery.
• Stripe: invoicing and payments.

We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply.

We keep access requests for up to 24 months. We keep account information for as long as your account is active and delete it within 90 days after the account is closed, unless we need to keep it longer to meet a legal obligation. Server logs are kept for the limited period set by our hosting provider.

Information is encrypted in transit, and access to it is limited to the people and providers who need it to operate the Services. No method of transmission or storage is completely secure, but we work to protect your information and will notify you if a breach affects you where the law requires.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict how we use it. Residents of California have the right to know what we collect, to request deletion and correction, and not to be discriminated against for exercising these rights. Residents of the European Economic Area and United Kingdom may also complain to their local data protection authority.

To make a request, email wallace.davi@northeastern.edu. We will respond within the time the law requires, and we may need to verify your identity first.

Spotlight is based in the United States, and our providers may process information in the United States and other countries. Where the law requires, we rely on appropriate safeguards for these transfers.

The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

The Services link to third-party sites. Their privacy practices are governed by their own policies, not this one.

We may update this policy from time to time. When we do, we will change the date at the top of this page, and if the changes are significant we will tell account holders by email.

Questions about this policy or your information? Email wallace.davi@northeastern.edu.