NiceFunnel Privacy Policy
- Controller: Oberil LLC, a Wyoming limited liability company, doing business as NiceFunnel, 30 N Gould St Ste N, Sheridan, WY 82801, USA
- Privacy contact: privacy@nicefunnel.com
- Effective date: October 4, 2026
1. Two roles
- NiceFunnel's own data: accounts, subscriptions, security, and platform operations. NiceFunnel decides how this is used.
- Seller data: a Seller's Buyers and contacts (orders, subscriber lists). The Seller decides how their contacts are used; NiceFunnel processes this data to provide the service to the Seller. For this data the Seller is the controller (or "business") and NiceFunnel acts as the Seller's processor (or "service provider"), using it only to provide the service, keep it secure, and meet legal obligations. A Data Processing Addendum is available to Sellers on request to privacy@nicefunnel.com. Buyers with questions about a Seller's use of their data should contact that Seller first.
2. What we collect
| Data | From whom | Why | Kept |
|---|---|---|---|
| Account: email, name, password hash or Google/Apple sign-in ID | Sellers and Buyers | Log in, secure the account | While the account exists; deleted within 30 days of closure, and from backups within a further 30 days |
| Seller page content: name, photo, bio, products, files, links | Sellers | Show the public page and deliver products | While the account exists |
| Orders: what was bought, price paid, discount/add-on used, refund and dispute status, Buyer email and name | Buyers (via checkout) | Deliver purchases, show order history, handle refunds and disputes | 7 years after the transaction (financial and tax records), then deleted |
| Contacts and subscribers: email, optional name, whether they opted in to updates, where they signed up (purchase, email signup, lead magnet) | Buyers and visitors who sign up on a Seller's page | Let the Seller keep in touch with people who asked | Until deleted by the Seller or the Seller's account is closed; after an unsubscribe only the opt-out record is used |
| Email preferences: unsubscribe status, bounce and complaint suppression | Recipients | Stop sending to people who opted out or cannot receive | As long as needed to honor the opt-out |
Page analytics: daily totals of page views and link clicks, per page and traffic source (for example "instagram.com" or a utm_source tag) | Visitors (aggregate) | Show Sellers what works | 13 months |
| Funnel analytics: which public page or checkout was reached and when, with a visitor code that changes every day | Visitors | Show Sellers where buyers drop off between pages, checkout and purchase | 13 months |
| Security and operations logs: request category, status, timing, request ID | Everyone | Keep the service working and secure | Up to 7 days in Cloudflare logs |
NiceFunnel's own analytics are cookieless. Page analytics store only daily counts. Funnel analytics count unique visitors with a code made on our server from the visitor's IP address, browser type and the Seller's page, combined with a random value that is replaced every day and then deleted. We never store the IP address or browser details themselves, the code cannot be linked from one day to the next, and we do not track visitors across sites.
Seller-configured pixels. A Seller may connect their own Google Analytics 4, Meta Pixel, TikTok Pixel or Microsoft Clarity account. These run only on that Seller's public pages (store, sales pages, checkout and the purchase confirmation) and only after the visitor clicks Accept in the cookie prompt. If you accept, those providers receive information about your visit (for example pages viewed, device and browser data, and for purchases the order value and an order ID) under their own privacy policies, and the Seller is responsible for that use. Clarity is never loaded on the purchase confirmation page. You can change your choice with "Cookie settings" on the Seller's page. For this pixel data the Seller and the provider decide how it is used and are responsible for it; NiceFunnel only places the provider's code on the Seller's page at the Seller's instruction and does not receive the data the provider collects.
We do not collect card numbers. Payments are entered on Stripe's pages. We receive payment status and limited payment identifiers from Stripe.
We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA), and we have not done so in the past 12 months. If a Seller enables advertising pixels on their own pages, any resulting sale or sharing is by that Seller, happens only after the visitor clicks Accept, and the visitor can withdraw with "Cookie settings".
3. Service providers
| Provider | What it does | Location |
|---|---|---|
| Stripe | Payments, subscriptions, seller payouts, fraud checks | United States and other countries where Stripe operates |
| Supabase | Database, login, and file storage | United States |
| Cloudflare | Hosting, network, security, logs | Global network |
| Amazon Web Services (Amazon SES) | Sends receipts, account and Seller emails, and processes bounces and complaints | United States (Ohio region) |
| Google / Apple | Sign-in, if you choose it | Global |
4. Legal bases (for people in the EU/UK)
Contract (running your account and purchases), legitimate interests (security, fraud prevention, aggregate analytics), consent (newsletter signups, where required), and legal obligation (financial records). Where we rely on consent you can withdraw it at any time; where we rely on legitimate interests you can object.
5. Your choices and rights
- Unsubscribe from any Seller's emails with the link in every email (one click).
- Access, correct, export, or delete your data by contacting privacy@nicefunnel.com. We respond within 30 days (45 days where US state law allows), and we may need to verify your identity first. If your data belongs to a Seller's list, we may forward your request to that Seller.
- Depending on where you live you may have additional rights (for example to object, restrict, or appeal) and the right to complain to a data protection authority.
- We will not discriminate against you for using your rights.
6. Security
Encryption in transit, database row-level security so each Seller sees only their own data, private file storage with access checks on every download, and least-privilege keys kept out of the code repository.
7. International transfers
NiceFunnel is operated from the United States, and our service providers process data in the United States and other countries. When personal data from the European Economic Area, the United Kingdom, or Switzerland is transferred to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments where needed), or on a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions where available, together with additional safeguards such as encryption in transit. You can ask for a copy of the relevant safeguards at privacy@nicefunnel.com.
8. Children
NiceFunnel is for people 18 and older. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it; contact privacy@nicefunnel.com if you believe a child has given us data.
9. Changes
We will post changes here and notify account holders of material changes.