Privacy

Lightfunnels Digital Ltd, a company registered in England and Wales (company number 17470268), registered office 24-26 Arcadia Avenue Fin009, London N3 2JU, United Kingdom, is responsible for your data. Privacy questions: hello@fizzyjar.com.

Buyers: your email, what you bought, when you downloaded it, and any messages you send a creator. Sellers: your account email, your store and products, your country, and whether you sell as a person or a company. If you import from Gumroad, we read your products there with the access token you give us, once, and don't keep the token. We count product page views without recording who viewed them. If a creator turns it on, your email is printed on the PDFs you download from them, to discourage sharing. Card details go straight to Whop, our payments partner, through its payment form, or to Stripe, on Stripe's page. We never see your card number. Sellers' identity documents go straight to Whop, or to Stripe, for their ID check. We never see them.

To deliver your files and receipts, answer questions, handle refunds, send each seller's share to their own Whop or Stripe account, and stop fraud and abuse. We don't sell your data or use it for advertising.

Delivering what you buy and running seller accounts: to carry out our contract with you. Keeping orders and invoices: because tax law requires it. Preventing fraud and abuse, keeping the site secure, error reports, counting page views and stamping PDFs: our legitimate interest in running a safe service that works. Emails about creators you follow: your consent, which you can withdraw with one click in any of those emails.

The creator you buy from sees your email and your order, so they can help you. These services run Fizzy Jar for us: Whop (payments and seller ID checks), Stripe (payments where Whop isn't used), Supabase (our database, in London), Amazon Web Services (file storage and safety checks, in London), Vercel (hosting), Resend (email, in the EU) and Sentry (error reports, in the EU). When you pay through Whop, Whop receives your email and payment details. When sellers verify their identity, their documents go straight to Whop, which processes them under its own privacy policy. When sellers set up payments with Stripe, Stripe receives the personal data they provide and processes it under Stripe's Privacy Policy (stripe.com/privacy).

Orders, invoices and refunds: six years after the end of the financial year they belong to, as UK tax law requires. Seller accounts and stores: while the account is open, then deleted within 90 days of closing, apart from the records above. Messages with creators: as long as the order they belong to. Following a creator: until you stop. Error reports: up to 90 days.

You can ask for a copy of your data, ask us to correct or delete it, ask us to stop or limit using it, or ask for it in a format you can take elsewhere. Email hello@fizzyjar.com and we reply within one month. Some data, like orders, we must keep for tax even if you ask us to delete it. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Our database and the files sellers upload are in London. Some of the services we use handle data in other countries: Whop, Stripe and Vercel in the US and elsewhere, Resend and Sentry in the EU. Transfers to the EU rely on the UK's adequacy regulations. Transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework, or on the ICO's International Data Transfer Agreement or Addendum.