Privacy Policy

1. Data Controller

The data controller is Flippell LLC (“Flippell”, “we”, “us” or “the platform”). You can contact us at contact@flippell.com.

2. Data We Process

• Account data: name, email address, encrypted password, country and city.
• Usage data: favorites, products added to My Flips, price alerts, notification preferences and basic dashboard activity.
• Subscription data: subscribed plan, billing cycle, subscription status, Stripe or mobile purchase identifiers, card brand and last digits when provided by the payment provider.
• Technical data: IP address, device, browser, security logs, session tokens and push notification token if you enable mobile notifications.
• Contact data: name, email, subject, message, IP and user-agent when you use the contact form.
• Data sent to AI features: product information and user-entered requests to generate advanced Deal Score, assisted search or negotiation strategy.

3. Purposes of Processing

• Create and manage your user account.
• Show products from marketplaces available in your country and according to your filters.
• Manage favorites, flips, price alerts, notifications and preferences.
• Calculate estimates, Deal Score, costs, negotiation strategy and assisted search results.
• Process subscriptions, free trials, renewals, cancellations and billing.
• Send transactional emails, such as welcome, password recovery, subscription changes and price alerts.
• Maintain platform security, prevent abuse, diagnose errors and improve the service.
• Comply with applicable legal, tax, accounting and regulatory obligations.

4. Legal Basis

• Contract performance: to create the account, provide the service, manage subscriptions and operate subscribed features.
• Consent: for non-essential communications, push notifications and non-technical cookies if enabled.
• Legitimate interest: for security, fraud prevention, product improvement, support and internal metrics.
• Legal obligation: for retaining tax, accounting, claims or authority-requested information.

5. Providers and Processors

Flippell may use technical providers to operate the service. These may include Stripe for web payments, Apple App Store and Google Play for in-app purchases, OpenAI for AI features, Expo for push notifications, email providers, hosting infrastructure, databases, monitoring and security.

When you click an external link, you leave Flippell and become subject to the terms and policies of the corresponding marketplace. Flippell does not control those external sites.

6. International Transfers

Some providers may process data outside your country or the European Economic Area. In those cases, Flippell will seek to apply appropriate safeguards, such as standard contractual clauses, data processing agreements or other mechanisms recognized by applicable regulations.

7. Retention

• Account data: while your account remains active and for the time needed to handle legal obligations or claims.
• Subscription and billing data: for applicable legal tax and accounting periods.
• Favorites, flips and alerts: until you delete them, close your account or they are no longer needed to provide the service.
• Push tokens: until you log out, revoke permissions, uninstall the app or request deletion.
• Contact messages: for the time needed to respond and manage the inquiry.

8. User Rights

You can request access, rectification, deletion, objection, restriction, portability and withdrawal of consent where applicable by writing to contact@flippell.com. We may need to verify your identity before handling the request.

If you are in the European Union or in a jurisdiction with a data protection authority, you may also file a complaint with the competent authority.

9. Security

We apply reasonable technical and organizational measures to protect information, including encrypted passwords, token-based authentication, access control and separation of provider credentials. No internet-connected system can guarantee absolute security.

10. Minors

Flippell is not directed to minors. If we detect that an account belongs to a person who does not meet the applicable legal minimum age, we may block or delete it.

11. Changes to This Policy

We may update this policy to reflect legal, technical or functional changes. If the change is relevant, we will communicate it through reasonable means within the platform or by email.