Fiddle Fig Privacy Policy

Effective date: November 3, 2026

1. Who we are and what this policy covers

Fiddle Fig is an online marketplace where independent artists sell handmade, original work directly to the people who love it. Fiddle Fig is operated by Humane Apps Design Company, 501 Union St Ste 545 PMB 794056, Nashville, Tennessee 37219-1876 US ("Fiddle Fig," "we," "us").

This policy explains what personal information we collect, why, who we share it with, and the choices you have. It applies to everyone who uses fiddlefig.com and related services:

• Visitors who browse without an account
• Buyers who purchase work, with or without an account
• Sellers (artists and makers) who open a shop and sell through Fiddle Fig

Some sections apply to everyone. Others are marked Buyers or Sellers. If you both buy and sell, both apply to you.

We built Fiddle Fig to be a home for artists, not an ad network. We do not sell your personal information, and we collect only what we need to run the marketplace.

2. Information we collect

Everyone with an account

• Account details: name, email address, password (stored in hashed form, never in plain text), and username.
• Profile content you choose to add: profile photo, bio, location (city/region), links.
• Communications: messages you send to other users through Fiddle Fig, messages you send us, and your email preferences.
• Reviews and favorites: reviews you write, shops and items you favorite.

Buyers

• Order information: items purchased, order history, prices, and taxes paid.
• Shipping information: recipient name, shipping address, and (optionally) phone number for delivery.
• Payment information: collected and processed directly by Stripe (see Section 4). We receive only limited details, such as the last four digits and brand of your card, and billing ZIP or postal code. We never see or store your full card number.
• Guest checkout: you can browse without an account. Before you sign up or buy, we identify your session with a random ID stored in a cookie so your cart works. When you check out, we ask for a verified email so we can send receipts and order updates.

Sellers

• Shop information: shop name, shop description, listings, photos, prices, inventory, shop policies, and shipping settings.
• Identity and payout information: to receive payments, you set up an account with Stripe through Stripe Connect. Stripe collects the information needed to verify your identity and pay you, which may include legal name, date of birth, address, the last four digits or full Social Security number or taxpayer ID, and bank account details. Stripe holds this information. We receive your account status (for example, verified or payouts enabled) and limited details needed to run your shop.
• Tax information: tax reporting information required by law, such as for IRS Form 1099-K, handled through Stripe.
• Application and vetting information: information you give us when applying to sell, so our moderators can confirm your work is handmade and original.
• Sales and performance data: orders, payouts, fees, refunds, and shop activity.

Collected automatically

• Device and usage data: pages viewed, searches, actions taken, referring page, browser type, device type, and approximate location derived from IP address.
• Logs: our servers record requests and events (with a session ID and, when known, your account ID) to keep the site running and secure. We keep these operational logs for 14 days.
• Cookies: see Section 7.

From others

• Stripe: payment status, fraud signals, and seller verification status.
• Sellers: shipping and tracking information for your order.
• Other users: for example, a buyer who leaves a review of a seller, or a report about a listing.

3. How we use your information

We do not use your information for third-party advertising, and we do not sell it.

4. Payments and Stripe

All payments on Fiddle Fig are processed by Stripe, Inc. ("Stripe"). Fiddle Fig does not receive or store full card numbers or bank account numbers.

Buyers: when you pay, you enter your payment details into a form provided by Stripe. Stripe processes the payment and sends us confirmation plus limited card details (such as brand and last four digits). Stripe may also use your information to detect and prevent fraud.

Sellers: to get paid, you create a connected account with Stripe through Stripe Connect. Stripe collects and verifies your identity, tax, and bank information to meet its legal "know your customer" obligations. By creating a connected account, you also agree to Stripe's terms, including the Stripe Connected Account Agreement. Stripe gives Fiddle Fig access to information about your connected account so we can route your earnings, deduct fees, and handle sales tax.

Stripe's handling of your information is governed by the Stripe Privacy Policy. For some activities, such as its own fraud prevention and Connect account services, Stripe acts as an independent controller of your data. See the Stripe Privacy Center for details.

5. How we share information

We do not sell your personal information or share it for cross-context behavioral advertising. We share it only in these situations:

Between buyers and sellers. Completing an order means sharing some information both ways:

Public content, like shop pages, listings, reviews, and public profile details, is visible to anyone.

With service providers. We use vendors that process data on our behalf and only under our instructions:

• Stripe: payment processing, seller payouts, identity verification, fraud prevention, and sales-tax calculation (Stripe Tax)
• Resend: delivery of emails such as account confirmations, receipts, order and payout updates, and any emails you've opted into
• Render: website hosting, databases, and file storage

For legal reasons. We share information when we believe in good faith that it's required by law, court order, or tax authorities, or that it's needed to protect the rights, safety, or property of Fiddle Fig, our users, or the public.

In a business transfer. If Fiddle Fig is involved in a merger, acquisition, or asset sale, your information may transfer as part of that deal. We'll notify you before your information becomes subject to a different privacy policy.

With your consent. In any other case, we'll ask first.

6. Sellers: your responsibilities for buyer information

When you sell on Fiddle Fig, you receive buyers' personal information. You may use it only to fulfill the order and handle related customer service, such as answering questions, processing returns, or resolving disputes.

As a seller, you agree to:

• Not add buyers to your mailing list or send them marketing unless they separately and explicitly opt in.
• Not sell, rent, or share buyer information with anyone except as needed to ship the order (for example, to a shipping carrier).
• Keep buyer information secure, and delete it when you no longer need it for the order, returns, or your legal and tax records.
• Follow privacy laws that apply to you.
• Tell us right away at [email protected] if buyer information in your care is lost, stolen, or accessed without permission.

For buyer information you hold outside Fiddle Fig (for example, a printed address label), you are responsible for how you handle it.

7. Cookies and similar technologies

We use a small number of cookies, mostly ones the site needs in order to work.

We don't use analytics cookies, advertising cookies, or cross-site tracking pixels. Most browsers let you block or delete cookies in settings. If you block essential cookies, parts of Fiddle Fig, like checkout, won't work.

Do Not Track and Global Privacy Control: because we don't sell or share personal information for targeted advertising, there's nothing to opt out of. We still honor Global Privacy Control signals as an opt-out request where the law requires.

8. How long we keep information, and how we protect it

Retention. We keep information only as long as we need it:

Deleting your account. You can delete your account at Settings > Account or by emailing [email protected]. Sellers must first complete or cancel open orders. Some information stays where the law requires it. Reviews and messages you already sent to other users stay visible to them with your name removed.

Security. We use encryption in transit (HTTPS), hashed passwords, limited staff access, and trusted providers. No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires. Use a strong, unique password and tell us right away if you think your account has been compromised.

9. Your rights and choices

For everyone:

• Access and update: view and edit most account, profile, and shop information in your settings.
• Email: unsubscribe from marketing using the link in any marketing email. We'll still send transactional emails, like receipts, payout notices, and security alerts.
• Delete: close your account as described in Section 8.
• Cookies: manage them through your browser (Section 7).

US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, or Tennessee) and whether those laws apply to Fiddle Fig, you may have the right to:

• Know what personal information we collect and how we use and share it
• Get a copy of your personal information
• Correct inaccurate information
• Delete your personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information, or targeted advertising (we don't do either)
• Not be treated differently for exercising these rights

To make a request, email [email protected]. We'll verify your identity by confirming your account email before acting. You may use an authorized agent; we'll ask for proof of their authority. If we deny your request, you can appeal by replying to our decision, and we'll respond within the time the law requires.

Stripe-held data. Sellers' identity and bank information is held by Stripe. Make requests about that data to Stripe through the Stripe Privacy Center, or ask us and we'll help route it.

10. Children, international users, changes, and contact

Children. Fiddle Fig is not meant for children. You must be at least 18 to create an account, buy, or sell. We don't knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we'll delete it.

International users. Fiddle Fig is based in the United States, and your information is processed and stored in the US.

Changes to this policy. We'll post updates on this page and change the effective date. For material changes, we'll notify you by email or on the site before they take effect.

Contact us.

Humane Apps Design Company
Attn: Privacy
501 Union St Ste 545 PMB 794056
Nashville, Tennessee 37219-1876 US
[email protected]

Reporting a security issue

If you find a security problem on this site, email [email protected]. Tell us what you found and how to reproduce it. Please give us time to fix it before you tell anyone else. Our security.txt file lists the same contact.