If a person bought from you - you automatically have their email address under payments.
You could generate some keys and email everyone a key with a cover note that the key is to give to their friends ... I would recommend that you force the key to be claimed so that only 1 person can claim it.