Flipnow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service at https://flipnow.ai.
By using our Service, you consent to the data practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, name, password (encrypted)
- OAuth Data: When you sign in with Google, we receive your email and profile information
- Content: Item photos, titles, descriptions you upload
- Marketplace Credentials: When you connect third-party accounts (eBay), we store access tokens
1.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on the Service
- Device Information: Browser type, operating system, IP address, device identifiers
- Analytics: We use Datafast for privacy-focused analytics (no personal data tracking)
- Error Monitoring: We use Sentry to track errors and improve service quality
2. How We Use Your Information
We use your information to:
- Provide the Service: Process your photos, generate listings, manage your account
- AI Analysis: Analyze uploaded photos to generate titles, descriptions, and pricing suggestions
- Marketplace Integration: Publish listings to connected marketplace accounts (eBay, etc.)
- Communication: Send transactional emails (account verification, password reset, service updates)
- Improve the Service: Analyze usage patterns, fix bugs, develop new features
- Security: Detect and prevent fraud, abuse, and security incidents
3. How We Share Your Information
We do not sell your personal information.
We may share your information with:
- Service Providers: Cloud storage (Vercel, Fly.io), authentication (Supabase), analytics (Datafast), error tracking (Sentry)
- Third-Party Marketplaces: When you connect accounts (eBay), we share listing data according to your instructions
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In the event of a merger, acquisition, or sale of assets
4. Data Storage and Security
Storage Location: Your data is stored on secure servers provided by Supabase (database), Vercel (frontend), and Fly.io (backend API), primarily in the EU and US regions.
Security Measures: We implement industry-standard security measures including:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Password hashing (bcrypt)
- Secure authentication tokens
- Regular security audits and monitoring
Retention: We retain your data for as long as your account is active or as needed to provide services. You can request deletion at any time.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Authentication: Keep you logged in (session cookies)
- Analytics: Understand how you use the Service (Datafast - privacy-focused, no personal data)
- Preferences: Remember your settings
Cookie Control: You can disable cookies in your browser settings, but this may affect Service functionality.
6. Your Privacy Rights
Depending on your location, you may have the following rights under GDPR, CCPA, and other privacy laws:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data ("right to be forgotten")
- Portability: Export your data in a machine-readable format
- Objection: Object to certain data processing activities
- Restriction: Request we limit how we use your data
Exercise Your Rights: Email us at support@flipnow.ai to make a request. We will respond within 30 days.
7. Third-Party Services
Our Service uses the following third-party providers:
- Supabase: Authentication and database hosting
- Vercel: Frontend hosting and CDN
- Fly.io: Backend API hosting
- Sentry: Error tracking and monitoring
- Datafast: Privacy-focused analytics
- Google OAuth: Optional sign-in method
Each provider has their own privacy policy governing their data practices. We encourage you to review their policies.
8. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses (for EU users)
- Data processing agreements with service providers
- Compliance with GDPR and CCPA requirements
10. Do Not Track Signals
We use privacy-focused analytics (Datafast) that respects Do Not Track (DNT) signals. Our analytics do not track individual users across websites.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Service. The "Last updated" date will reflect the most recent version.
Check Regularly: We recommend reviewing this Privacy Policy periodically for updates.
Contact Us About Privacy
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
Email: support@flipnow.ai
Website: https://flipnow.ai
Data Protection Officer: For EU users, you may contact our DPO for privacy-related inquiries.