Last updated: August 27, 2026

Privacy Policy

This policy explains what personal data FanToBuy collects, why, and how it is handled.

1. Data we collect

• Sellers: studio name, email address, password (stored as a hash), payout details (IBAN or PayPal email), billing details and VAT information, and — where required for verification — identity information.
• Buyers: the email address entered at checkout and the purchase itself. Payment card details are handled by Stripe and never reach our servers.
• Usage: link views with a coarse source label (for example "instagram" or "direct"). We do not run third-party advertising trackers.

2. Why we use it

• To operate the platform: accounts, payments, content delivery and payouts.
• To meet legal obligations: invoicing, tax records and fraud prevention.
• To show Sellers analytics about their own links and customers.

3. Processors

We use a small number of service providers to run FanToBuy: Stripe (payments), Vercel (hosting and file storage), Neon (database) and Resend (email delivery). Each processes data only on our instructions and under their own security commitments.

4. Retention

Account data is kept while the account exists. Transaction and invoice records are kept as long as tax law requires. Download links expire automatically; content of deleted links is removed from storage.

5. Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. Contact info@fantobuy.com; we respond within 30 days. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. Security

Content is stored in private storage and only delivered through expiring, limited-use links. Passwords are hashed. Access to production systems is limited and secured.

7. Contact

Privacy questions: info@fantobuy.com.