Privacy Policy

The data controller is Fannera(company no. 17197430), registered office 20 Wenlock Road, London, N1 7GU, England. ICO registration 00015370970.

We act in two roles:

• Data controller for our marketing site and for our own account holders (the labels and their team members who use Fannera).
• Data processor for fan data that our label customers collect or upload through the platform — the label is the controller for that data and our handling of it is governed by our Data Processing Agreement.

By category of person:

• Website visitors: analytics and marketing cookies (only once you have consented), IP address, device and browser information, and referral source.
• Account holders (label users): name, email address, company/label name, billing information (processed by Stripe — we never see full card details), and usage logs.
• Fans of our labels' artists: data our label customers upload or collect through the platform — typically email address, name if provided, city, purchase history and engagement. The label is the controller for this data; we process it only on the label's instructions.

We use the sub-processors below to run the service. The full, maintained list — with purposes, processing locations and transfer mechanisms — is at fannera.com/sub-processors.

• Supabase (database & auth), hosted via Lovable Cloud — Application database, authentication and file storage for the platform.
• Lovable — Application hosting, build and content delivery of fannera.com.
• Stripe — Payment processing for subscriptions and fan purchases (Stripe Checkout / Connect). Card details never touch our servers.
• Resend — Transactional and broadcast email delivery (receipts, magic links, label broadcasts).
• PostHog — Product analytics and session replay for fannera.com. Loaded only for visitors who accept analytics cookies; signed-in users are identified by account ID only.

PostHog provides optional product analytics and session replay for fannera.com, and is loaded only after you have granted analytics consent — see our Cookie Policy for how to change your choices. PostHog is included in our sub-processor list.

Some of our sub-processors process data outside the UK. Where data is transferred to the US, the transfer relies on the UK–US Data Bridge for importers that participate in it; otherwise we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. We confirm the applicable mechanism with each vendor, and the mechanism for each sub-processor is listed on our sub-processors page.

• Account data: for the life of your account, plus 6 years for accounting and tax records as required by law.
• Marketing suppression list: kept indefinitely once you opt out, so we can honour your opt-out.
• Usage and event logs: 90 days.
• Fan data held as processor: for the duration of the label's subscription, then returned or deleted as set out in the DPA.
• Cookie consent records: 6 months.

Under UK GDPR you have the rights of access, rectification, erasure, restriction, portability, and objection, and you can withdraw consent at any time (for example via Cookie settings or unsubscribe links). To exercise any right, email support@fannera.com. We respond within one month. If your request concerns fan data held on behalf of a label, we will direct you to that label as the controller.

You can complain to the Information Commissioner's Office (ico.org.uk). We are ICO registered — 00015370970.

See our Cookie Policy for the full list of trackers, their categories, and how to change your choices.

We do not make solely automated decisions that produce legal or similarly significant effects about you. Features that use AI (for example, AI Release Check) produce advisory output that a human reviews before acting.

We use encryption in transit (TLS), access controls that scope every workspace to its own team, row-level security in our database, and the platform security of our hosting providers. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the ICO of a personal data breach where the law requires it.

We may update this policy from time to time. Material changes are notified by email or in-app notice before they take effect; the effective date at the top always shows the current version.

Privacy and data-protection queries: support@fannera.com. General support: support@fannera.com.