COUCHLIGHT LLC Last updated: July 3, 2026
This Privacy Policy describes how Couchlight LLC ("Couchlight," "we," "us," or "our") collects, uses, and protects information when you use ReelCanister (the "Service") at reelcanister.com. ReelCanister is an online marketplace where approved creators sell bundles of DRM-free downloadable video files, and buyers purchase and download those bundles. By creating an account or otherwise using the Service, you agree to the practices described in this policy.
1. Who We Are
ReelCanister is operated by Couchlight LLC. For privacy-related inquiries, contact us at:
Email: [email protected] Mailing address: 18685 Main St Suite 101-305, Huntington Beach, CA 92648
If you are located in the European Economic Area (EEA) or the United Kingdom, Couchlight LLC is the data controller for the personal data described in this policy.
2. The Roles on ReelCanister
ReelCanister is a two-sided marketplace, and the data we handle depends on how you use it:
- Buyers create an account, purchase bundles, and download the files they have purchased.
- Creators are invited and approved individually. They upload videos, assemble them into bundles, set prices, and receive payouts. Creators complete identity and payout verification directly with our payment processor (see Section 4).
- Visitors may browse public creator storefronts and published bundle listings without an account.
3. Information We Collect
3.1 Account Information
To use most features you create an account. Depending on how you sign up, we collect:
| Data | Purpose | Retention |
|---|---|---|
| Email address | Account identity, sign-in, transactional email (receipts, confirmations, account notices) | Life of the account + 3 years |
| Password | Authentication. Stored only as a salted, hashed value — we never see or store your plaintext password | Life of the account |
| Display name | Shown on your profile and, for creators, on your storefront | Life of the account + 3 years |
If you sign in with Google ("Sign in with Google"), we receive your email address and basic profile information (name) from Google in place of a password. We do not receive your Google password. Your use of Google sign-in is also subject to Google's own privacy policy.
3.2 Purchase Information
When you buy a bundle, payment is processed by Stripe. Couchlight receives and stores a record of the transaction:
| Data | Purpose | Retention |
|---|---|---|
| Stripe checkout session ID / payment intent ID | Link your purchase to your library and to the selling creator's payout | 7 years (tax / accounting) |
| Amount, currency, and platform fee | Order records, receipts, creator payout accounting | 7 years (tax / accounting) |
| Bundle purchased | Grants download access in your library | Life of the account |
Couchlight does not receive or store your full card number, CVC, or billing address — those are handled entirely by Stripe under its own privacy policy.
3.3 Creator Information (Sellers)
If you are an approved creator, we additionally collect and store:
| Data | Purpose | Retention |
|---|---|---|
| Creator profile (slug, name, bio) | Your public storefront | Life of the account + 3 years |
| Stripe Connect account ID and onboarding status | Connect your sales to payouts; gate publishing until verification is complete | 7 years (tax / accounting) |
| Uploaded content and metadata (video files, thumbnails, titles, descriptions, file sizes) | Store, list, and deliver the bundles you sell | Until you delete the content or your account, then subject to backup cycles |
Identity, tax, and bank details for payouts are collected directly by Stripe through Stripe Connect onboarding. Couchlight does not collect or store your government ID, bank account number, or tax identification number — Stripe acts as the processor for creator verification (KYC) and payouts under its own privacy policy.
3.4 Content Stored on Your Behalf
Video files, thumbnails, and cover images uploaded by creators are stored with a third-party cloud storage provider and are not publicly accessible. Access is granted only through temporary, access-controlled download links issued to the uploading creator or to buyers who own the relevant bundle. Buyers' downloaded files reside on their own devices thereafter and are outside our control.
3.5 Usage and Technical Data
| Data | Purpose | Retention |
|---|---|---|
| Download events (which library item / video was downloaded, and when) | Statistics for creators and abuse / fraud detection | 2 years |
| IP address | Logged server-side for security, rate limiting, and abuse detection | 90 days |
3.6 Information You Voluntarily Provide
If you contact us for support, we collect your name, email address, and anything you include in your message, used solely to respond to your inquiry.
3.7 Cookies
ReelCanister uses cookies that are strictly necessary to operate the Service — primarily to keep you signed in and to maintain your session securely. We do not use advertising cookies, and we do not share data with advertising networks or serve third-party ads. Most browsers let you block or delete cookies, but blocking essential cookies will prevent sign-in and other core features from working.
4. How We Use Your Information
We use the information above to:
- Operate your account and the marketplace — authenticate you, display storefronts and libraries, and grant download access to bundles you have purchased;
- Process transactions — create Stripe Checkout sessions, record purchases, calculate the platform fee, and route payouts to creators through Stripe Connect;
- Deliver content — issue temporary, access-controlled download links so buyers can download the files in bundles they own;
- Send transactional email — purchase receipts, account confirmations, creator approval notices, and similar service messages;
- Provide support — respond to questions and resolve account, purchase, or payout issues;
- Prevent fraud and abuse — detect chargebacks, credential abuse, and attempts to circumvent access controls or download limits;
- Comply with law — meet tax, accounting, and other legal obligations.
We do not sell your personal data, and we do not use it for third-party advertising or cross-context behavioral advertising.
5. Legal Basis for Processing (EEA/UK Users)
If you are in the EEA or UK, our legal bases are:
- Contract performance (Art. 6(1)(b) GDPR) — creating your account, processing purchases, delivering downloads, and paying out creators;
- Legitimate interests (Art. 6(1)(f) GDPR) — security logging, fraud prevention, and basic service statistics, where not overridden by your rights;
- Consent (Art. 6(1)(a) GDPR) — where we specifically ask for it; you may withdraw consent at any time;
- Legal obligation (Art. 6(1)(c) GDPR) — retaining transaction records for tax and accounting.
6. Data Sharing and Subprocessors
We do not sell, rent, or trade your personal data. We share limited data only with the service providers that make the marketplace work, and as required by law:
| Provider | Purpose |
|---|---|
| Stripe / Stripe Connect | Payment processing, creator identity verification (KYC), and payouts |
| Optional "Sign in with Google" authentication, if you choose it | |
| Cloud infrastructure & hosting providers | Authentication, database, application hosting, and storage of uploaded files |
Each provider processes data under its own privacy policy and our data-processing agreements. Between marketplace participants, a selling creator can see the purchases of their own bundles (for their sales dashboard) but does not receive your payment details; buyers see a creator's public storefront information only.
Business transfers. If Couchlight is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honor this Privacy Policy or will notify you of any material change to how your data is handled.
We may also disclose data if required by law, subpoena, or court order, or to protect the rights, property, or safety of Couchlight, our users, or the public.
7. Data Retention
| Data | Retention Period |
|---|---|
| Account records (email, display name) | Life of the account + 3 years |
| Transaction and payout records | 7 years (tax / accounting) |
| Uploaded content | Until deleted by the creator or on account closure, subject to backup cycles |
| Download event logs | 2 years |
| IP address logs | 90 days |
| Support correspondence | 2 years from last contact |
After the applicable period, data is deleted or anonymized.
8. Data Security
We implement reasonable technical and organizational measures, including:
- Encryption in transit (HTTPS) for all traffic;
- Storage that is not publicly accessible — files are reachable only through temporary, access-controlled links;
- Access controls and least-privilege, server-side-only access to sensitive operations;
- Reliance on our payment processor for all sensitive payment and payout data, so that it never touches our servers.
No system is completely secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from factors outside our reasonable control. Because bundles are sold DRM-free, files you download are, by design, unencumbered — protecting them after download is your responsibility.
Data breach notification. If we become aware of a data breach affecting your personal data, we will notify affected users and the relevant authorities as required by applicable law — and, where the GDPR applies, without undue delay and, where feasible, within 72 hours of becoming aware of it.
9. Your Rights
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you;
- Correct — request correction of inaccurate data (you can also edit your profile in-app);
- Delete — request deletion of your personal data, subject to legal exceptions (e.g., transaction records we must retain for tax purposes, or fraud-prevention records);
- Portability — request your data in a structured, machine-readable format (EEA/UK);
- Object / restrict — object to processing based on legitimate interests (EEA/UK);
- Withdraw consent — where processing is based on consent.
To exercise any right, email [email protected]. We will respond within 30 days (or as required by applicable law) and may verify your identity first.
10. Children's Privacy
ReelCanister is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact [email protected] and we will delete it promptly.
11. International Transfers
Couchlight LLC is based in the United States. If you are outside the US, your data may be transferred to and processed in the United States or other countries where our service providers operate, which may have different data protection laws than your country. For EEA/UK users we rely on Standard Contractual Clauses or other lawful transfer mechanisms where required.
12. California Residents — CCPA/CPRA
If you are a California resident, the CCPA (as amended by the CPRA) grants you specific rights.
Your Rights
- Right to Know — the categories and specific pieces of personal information we collect, the sources, purposes, and any third parties with whom it is shared;
- Right to Delete — deletion of personal information, subject to exceptions (e.g., transaction records, fraud prevention, legal obligations);
- Right to Correct — correction of inaccurate personal information;
- Right to Opt Out of Sale/Sharing — we do not sell your personal information or share it for cross-context behavioral advertising, so no opt-out is required;
- Right to Limit Use of Sensitive Personal Information — we do not use sensitive personal information beyond permitted purposes;
- Right to Non-Discrimination — we will not discriminate against you for exercising your rights.
Categories of Personal Information Collected
| CCPA Category | Examples We Collect | Sold or Shared? |
|---|---|---|
| Identifiers | Email address, display name, IP address, account ID | No |
| Commercial information | Bundles purchased, order/transaction records, payout records | No |
| Internet or network activity | Download events, sign-in activity | No |
| Audio/visual information | Video files, thumbnails, and covers uploaded by creators | No |
We do not collect Social Security numbers, driver's license numbers, precise geolocation, biometric data, or health data. (Creator payout identity/tax data is collected directly by Stripe, not by Couchlight.)
How to Submit a Request
Email [email protected] with the subject "California Privacy Request." We will respond within 45 days as required by California law and may verify your identity. You may use an authorized agent.
13. Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payments, creator KYC, and payouts | stripe.com/privacy |
| Optional sign-in | policies.google.com/privacy |
We also rely on third-party cloud infrastructure, hosting, and storage providers that process data on our behalf under data-processing agreements. Couchlight does not control these services. By using features that depend on them, you are also subject to their respective terms and privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where feasible, provide notice within the Service. Continued use after a change constitutes acceptance of the revised policy.
15. Contact Us
For privacy questions, data requests, or concerns:
Couchlight LLC Email: [email protected] Mailing address: 18685 Main St Suite 101-305, Huntington Beach, CA 92648
If you are in the EEA or UK and believe we have not adequately addressed your concerns, you may lodge a complaint with your local data protection authority.
© 2026 Couchlight LLC. All rights reserved.